last executing test programs: 2m30.389093681s ago: executing program 32 (id=204): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigsuspend(&(0x7f0000000000)={[0x100000000]}, 0x8) 1m59.859780557s ago: executing program 33 (id=725): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f0000000240)="2acd4aecf91c42629a13fe53", 0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 1m55.812356459s ago: executing program 34 (id=814): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xd}, {0xfff2, 0xffff}}}, 0x24}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m52.816424015s ago: executing program 35 (id=847): quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) r0 = syz_open_dev$usbmon(&(0x7f0000000180), 0x1, 0x840) read$usbmon(r0, 0x0, 0x0) geteuid() 1m34.286967157s ago: executing program 36 (id=1191): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000001e40)=""/104, 0x68}], 0x2}, 0x2}], 0x1, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)='3', 0x1}], 0x1}}, {{0x0, 0xfffffffffffffea1, &(0x7f0000000240)=[{&(0x7f00000004c0)="b458b09a7bc6afad62c3f97125bc54bad5b9f64492fb3237f80678f40515a15a9bc7f8f9c9244e7fe0c328f6457f6d457effb6e3090a2f0e0a47d7c95dddc94d4d0ca124", 0x44}], 0x1}}], 0x2, 0x20e808e) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 1m25.841068605s ago: executing program 1 (id=1388): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x200) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) 1m25.312673684s ago: executing program 1 (id=1406): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000001010400000000000000006c1d3546ab3d4f650c00028005000100000000000c0002"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064"], 0x270}, 0x1, 0x0, 0x0, 0xc814}, 0x4) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 1m25.223756257s ago: executing program 1 (id=1409): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 1m24.869053239s ago: executing program 1 (id=1417): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1m24.834270381s ago: executing program 1 (id=1420): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x2000000009, 0x8, 0x3) mbind(&(0x7f000057f000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x3) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 1m24.581467039s ago: executing program 1 (id=1427): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x8, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x4, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x1, 0x6, 0x1, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 1m24.581196059s ago: executing program 37 (id=1427): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x8, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x4, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x1, 0x6, 0x1, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 59.639507209s ago: executing program 4 (id=1976): bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x84) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) 59.605808709s ago: executing program 4 (id=1977): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 59.426812966s ago: executing program 4 (id=1982): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0xfffffffffffffd34, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xfff5) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) 59.229535043s ago: executing program 4 (id=1986): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x8b101e, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$9p_rdma(0x0, &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x20000, 0x0) 59.172435195s ago: executing program 4 (id=1987): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r2, @ANYBLOB="83040100011402002000128008000100736974001400028008000100ac1414aa0500050001"], 0x40}, 0x1, 0x0, 0x0, 0x20048044}, 0x24008000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 58.596522815s ago: executing program 4 (id=2000): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f00000004c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0xb, @v={0xfc, 0x3, 0x5, 0x6, 0x0, 0x33, 0x80, {0x0, 0xb, "7c9461d7491e6979"}, 0x0, 0xd, 0x6, 0x8, 0x71, "61e70fdfdf5ca2edd9fb4ede26d61c7c869f6d54c34f093d1ef7cf96a569a9259cbb426f5d9df5e6e74b79de79f1aea49cb471e8430d90a56d58ff8b435ba7bbc97b4407c8e8914a49c7475ab1b7b6ca4f5fe0e2722612313aee157eac977555bafc7651e786874f20d29e6b11757e8198"}}, 0x8a) 58.596325425s ago: executing program 38 (id=2000): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f00000004c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0xb, @v={0xfc, 0x3, 0x5, 0x6, 0x0, 0x33, 0x80, {0x0, 0xb, "7c9461d7491e6979"}, 0x0, 0xd, 0x6, 0x8, 0x71, "61e70fdfdf5ca2edd9fb4ede26d61c7c869f6d54c34f093d1ef7cf96a569a9259cbb426f5d9df5e6e74b79de79f1aea49cb471e8430d90a56d58ff8b435ba7bbc97b4407c8e8914a49c7475ab1b7b6ca4f5fe0e2722612313aee157eac977555bafc7651e786874f20d29e6b11757e8198"}}, 0x8a) 28.570316933s ago: executing program 0 (id=2593): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x70f, 0x1, 0x3, 0x6, {{0x6, 0x4, 0x2, 0x1, 0x18, 0x64, 0x0, 0x6, 0x29, 0x0, @multicast1, @private=0xa010102, {[@generic={0x44, 0x2}]}}}}}) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfd44) 28.398775429s ago: executing program 0 (id=2602): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x2300, 0x0}, 0x10) 28.318068642s ago: executing program 0 (id=2606): unshare(0xe060400) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x4) r2 = openat$cgroup_ro(r1, &(0x7f0000001100)='cpu.stat\x00', 0x5000000, 0x0) read$char_usb(r2, &(0x7f00000001c0)=""/218, 0xda) 28.268217334s ago: executing program 0 (id=2609): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@bh}]}, 0x1, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") open(&(0x7f0000000080)='./bus\x00', 0x14d27e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) rmdir(&(0x7f0000000100)='./control\x00') 28.046057081s ago: executing program 0 (id=2613): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), &(0x7f0000001d00)=ANY=[], 0x381, 0x0) 27.568150609s ago: executing program 0 (id=2627): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x5f22}) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2) 27.552665129s ago: executing program 39 (id=2627): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x5f22}) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2) 23.676455936s ago: executing program 7 (id=2703): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0x2}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)="81b641f1f3843704b6", 0x9}], 0x1}, 0x11) recvmsg$can_j1939(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=""/139, 0x8b}], 0x1}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 22.747988298s ago: executing program 7 (id=2734): rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x20000000000000}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x1, 0x0, 0x5, 0x1fd}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2b, 0x9}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x1, 0x90}) 21.894527268s ago: executing program 7 (id=2769): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) 21.82974812s ago: executing program 7 (id=2771): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000100)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x11044a2, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 21.822146941s ago: executing program 7 (id=2774): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x5, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) 21.712545944s ago: executing program 7 (id=2776): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setuid(0xee01) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x47) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) 21.712296395s ago: executing program 40 (id=2776): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setuid(0xee01) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x47) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) 9.684249388s ago: executing program 2 (id=3036): sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = socket$inet6(0xa, 0x80002, 0x0) rt_tgsigqueueinfo(r0, r0, 0x28, &(0x7f0000000b00)={0x19, 0x2, 0x521}) shutdown(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x84, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 9.65255213s ago: executing program 2 (id=3038): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) 9.568885632s ago: executing program 2 (id=3043): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 9.403916988s ago: executing program 2 (id=3048): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x200000, &(0x7f0000000200), 0x6, 0x5af, &(0x7f0000000dc0)="$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") syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x40100) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) waitid(0x0, r0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 9.158391067s ago: executing program 2 (id=3052): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f00000000c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{}, {r1, r2+60000000}}, 0x0) 8.669604314s ago: executing program 2 (id=3062): r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x205, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)=r2}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) 8.669423045s ago: executing program 41 (id=3062): r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x205, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)=r2}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) 3.483295877s ago: executing program 3 (id=3140): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000088000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000500004801400030076657468315f6d6163767461700000000800014000000005"], 0x124}, 0x1, 0x0, 0x0, 0xd4}, 0x800) 3.172509128s ago: executing program 3 (id=3147): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[], 0x0, 0x44}, 0x28) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) 2.808103971s ago: executing program 3 (id=3152): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x1, 0x0, 0x1, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10) close(r0) 2.515351801s ago: executing program 8 (id=3159): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x82, &(0x7f0000000100)=@assoc_value={r3, 0x7fff}, 0x8) 2.426044145s ago: executing program 8 (id=3162): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x3, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000240)=0xe0, 0x4) sendmmsg$inet6(r0, &(0x7f0000006e40)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="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", 0xfd}, {&(0x7f0000000080)="3361849159277db3032c8dd904f0f380b72688ccbdfb1ef48d573294ddbe0f71df093d0014d9d141e871ef6625c69bfaa35438eac1d96a0d75658c7e95e2e49c9e6f45c6c75cdaa64cc449e5d1a723fcc707045540809f", 0x57}, {&(0x7f0000000280)="258631a5a41a47da539cf907f57998636fb435af75589f57d89c952a2f12a6d8aabd270c54c7d6d4dfa6c2ef6a", 0x2d}], 0x3}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000004c0)="fecb85a434a5502ead508c3a855d1247e06105fb8ac57edf9094aa0c15b09901f48fc9d276a1d209a61c09afb44feeb3f355ce378f3ee105203dcbf4d127b2fb13c10a7fd6abc98f7b2aa6b8947381d03364ae1a9c018d8ee870ceb8", 0x5c}, {&(0x7f0000000540)="31bb06bf473c3225069cb1e2564b9f60e4dd6c7e83669e4d181ad0baec4766e6236ad935a964298bdf1ae404d3b47c1bd4f470b8cab903c6b8172a21f3d648b597ca7a0f9da9b2186d8a41b1a99386cce267fa859302cddc6341184e0ea82616dc624ba66e514b39f44e8a4e7d1261226a3764d97d71b00ff9b29d2891eeb478ad769f201b2263879397a67788c1c1bdda51cf0d4092c222b0f8d92094412177ceb0f1b383adc82548962d1eee65eebf065b5b2d1deba96e80c8dc8fa6259e7077db93037ef46a66ecf587a0ff27ba2bc476cbd9bdca7f8716251adb6c48d63a", 0xe0}, {&(0x7f0000000640)="84a7cc7c177140967197ccbae50747ddaf1fcffbca6218fb980701d808c86276552a87f06548503becd860d2fd38d113df5cdc666238ad755c9f7d58f328bab24b24465509fd", 0x46}], 0x3}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000780)="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", 0x15d}], 0x1}}], 0x3, 0x4000) 2.377515836s ago: executing program 6 (id=3163): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[], 0x0, 0x44}, 0x28) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) 2.329088788s ago: executing program 8 (id=3164): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000680)='@', &(0x7f0000000400)=@tcp6=r2, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.298204948s ago: executing program 5 (id=3166): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x0, 0xa, 0x0, 0x42000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 2.227299221s ago: executing program 9 (id=3167): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000400)={r2, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0x7}}, 0xffff}, 0x90) 2.226856961s ago: executing program 8 (id=3168): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x3, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000003c0], 0x0, 0x0, &(0x7f00000003c0)=ANY=[]}, 0x78) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040)}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 2.201316042s ago: executing program 6 (id=3169): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000000000b0, 0x4275a, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xd0a, 0x4}, 0x2000, 0x8, 0x0, 0x0, 0xb, 0x385, 0xb, 0x0, 0x0, 0x0, 0x4000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r2, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r1, 0x407, 0x4100004) write$eventfd(r1, &(0x7f0000001100)=0xffffffffffffffff, 0x8) 2.161427854s ago: executing program 9 (id=3170): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_wait(r2, &(0x7f0000000140)=[{}], 0x1, 0xffffffff) 1.435252419s ago: executing program 5 (id=3171): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x20, 0x0, 0xc9, r3}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010102}, @IFA_ADDRESS={0x8, 0x1, @empty}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3f}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x463d}, @IFA_ADDRESS={0x8, 0x1, @empty}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040804}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.434519749s ago: executing program 6 (id=3172): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x7, 0x80, 0x2, 0x5, 0x0, 0x3, 0x20, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfff, 0x1, @perf_config_ext={0x1, 0x1}, 0x100020, 0x5, 0x5, 0x4, 0x9, 0x82, 0x1, 0x0, 0x3ff, 0x0, 0x8}) socket(0x400000000010, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000000c0)='./file0\x00', 0x14848, &(0x7f0000000740)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95\x00\x00ni_xlate=0,showexec,shortname=winnt,shortname=win95,nonumtairodir,nonumtail=0,shortname=mixed,nfs=nostale_ro,utf8=0,\x00', @ANYRES32, @ANYRES64=0x0, @ANYRES32=0x0, @ANYRES32], 0x1, 0x26c, &(0x7f0000000340)="$eJzs3U9rU1kYB+A3bTpJC0OyGCgzDMwdZjOr0HaYfcrQgWECipKFriw2RWlqoYWCLtruit9Bv4Iu3QouxK1fQASpghvrqgshEm//JDWJjZpG7PNs+nLu++Ock17upYueXPl1eWlhZW1xd3cn8vlMZMtRjr1MFGMkRiO1FQDA92Sv0Yg3jdSw1wIAnA7vfwA4e3q9/zNbh2PnT39lAMCgfNHf/yMDWRIAMGAXL13+f7ZSmbuQJPmI5e316no1/Zlen12M61GPWkxFId5FNA6l9b//VeamkqaXxcgvb46k+c316mh7fjoKUeycn05SUW3mDvJjMbGffzYRtZiJQvzUOT/TMf9D/PlHy/ylKMTTq7ES9ViIZjbN5yJiYzpJ/jlXOZbPfegDAAAAAAAAAAAAAAAAAAAAAIBBKCWHiu3n36Tn95RK3a6n+dbzgcZ7nQ/U2Dx2vk42fskOd+8AAAAAAAAAAAAAAAAAAADwrVi7eWtpvl6vrfYqbjy592gnlwY+2dy7yOzP219qu2fP+Ml2caz48fcXdzpdykWu38/n84qxiGgdSfanfPjbACf9WsXjnWs//7U2+Xe3nsi2jtxubrWtp8uNlB3UB/66ENG1J9/3Ddla3D8oym8/6jm4lWqr48P+xU3eLc8/2Hj+6qSpHg+NxuggHkUAAAAAAAAAAAAAAAAAAHDmHf3T77BXAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDc/T9//0WuWgbyXdt3hr2HgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4H0AAAD//7qXlSU=") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 1.309149434s ago: executing program 6 (id=3173): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) fsopen(0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000ac0)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, &(0x7f0000001ac0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 1.265894055s ago: executing program 9 (id=3174): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.223228337s ago: executing program 3 (id=3175): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @loopback={0x100000}, 0x6}, 0x1c) 1.160872389s ago: executing program 5 (id=3176): getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00', 0x4}}, 0xfffffffe, 0x4, 0x9, 0x2, 0x6}, &(0x7f0000000080)=0x98) socket(0x10, 0x803, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @remote}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x8, 0xf39, 0x2, 0xaecb, 0xffffffff, 0x4000, 0x7fff, 0xffff0000, r2}, 0x20) 1.13626929s ago: executing program 6 (id=3177): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.080692422s ago: executing program 9 (id=3178): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xe7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, 0x1c) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000400)={r2, 0x7}, 0xc) 1.080319492s ago: executing program 3 (id=3179): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.080040712s ago: executing program 5 (id=3180): r0 = fsopen(&(0x7f0000000080)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x7) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x4d) lseek(r2, 0x1, 0x1) getdents64(r2, 0x0, 0x4f) 1.065366732s ago: executing program 8 (id=3181): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x3, 0x10000, 0x5}, {0x10000002, 0x0, 0x0, 0x9}], 0x10, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x100) socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x10) 984.205715ms ago: executing program 5 (id=3182): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x1c, r3, 0x1ffd1684a4a9b69d, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x24, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}}, 0x0) 958.463476ms ago: executing program 5 (id=3183): setpgid(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x2, @perf_bp={0x0, 0x8}, 0x24, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r0, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x14, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6622b533, 0x0, 0x0, 0x0, 0x6}, [@printk={@llx, {0x3, 0x0, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, @printk={@p, {0x5, 0x3, 0x6, 0xa, 0x1, 0xfff5}}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 955.463786ms ago: executing program 8 (id=3184): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) recvmmsg(r0, &(0x7f0000004440)=[{{0x0, 0x0, &(0x7f0000004340)=[{0x0}, {&(0x7f0000002f40)=""/236, 0xec}], 0x2}, 0x10000}], 0x1, 0x23, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 786.275702ms ago: executing program 6 (id=3185): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000002100)="b9fa030711a5f32e019e14f088a847e0ffff00124000638477fbac141416e000030a94029f030301", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 220.519922ms ago: executing program 9 (id=3186): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000400)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/79, 0x4f}, 0x32}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 139.835395ms ago: executing program 9 (id=3187): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a6c0100000b0a0300000000"], 0x414}, 0x1, 0x0, 0x0, 0x44}, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0) 0s ago: executing program 3 (id=3188): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83470806", 0x5ea, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @local}, 0x14) kernel console output (not intermixed with test programs): ac1414aa, cluster identity 4711 [ 125.028668][ T9544] tipc: Enabling of bearer rejected, failed to enable media [ 125.136112][ T9550] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1956'. [ 125.166420][ T9550] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1956'. [ 125.177627][ T9550] netlink: 'syz.7.1956': attribute type 7 has an invalid length. [ 125.188377][ T9550] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1956'. [ 125.197777][ T9550] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1956'. [ 125.206993][ T9550] netlink: 'syz.7.1956': attribute type 7 has an invalid length. [ 125.298220][ T9561] loop7: detected capacity change from 0 to 512 [ 125.315000][ T9561] EXT4-fs: Ignoring removed mblk_io_submit option [ 125.353544][ T9561] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 125.383806][ T9561] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.423012][ T9561] ext4 filesystem being mounted at /236/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.684577][ T5741] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.826231][ T9573] loop7: detected capacity change from 0 to 8192 [ 125.918202][ T9577] netlink: 4580 bytes leftover after parsing attributes in process `syz.8.1967'. [ 125.938800][ T9581] netlink: 9286 bytes leftover after parsing attributes in process `syz.9.1968'. [ 126.049252][ T9577] netlink: 4580 bytes leftover after parsing attributes in process `syz.8.1967'. [ 126.695946][ T9614] loop9: detected capacity change from 0 to 1024 [ 126.735834][ T9614] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.797112][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 126.797126][ T28] audit: type=1326 audit(1775042292.458:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9619 comm="syz.7.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15506c819 code=0x7ffc0000 [ 126.832441][ T9614] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 126.869251][ T28] audit: type=1326 audit(1775042292.458:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9619 comm="syz.7.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe15506c819 code=0x7ffc0000 [ 126.915151][ T9625] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 126.935251][ T28] audit: type=1326 audit(1775042292.458:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9619 comm="syz.7.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15506c819 code=0x7ffc0000 [ 126.964611][ T9625] EXT4-fs (loop9): This should not happen!! Data will be lost [ 126.964611][ T9625] [ 126.978627][ T9627] netlink: 'syz.7.1990': attribute type 21 has an invalid length. [ 126.986747][ T9627] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1990'. [ 126.988092][ T28] audit: type=1326 audit(1775042292.458:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9619 comm="syz.7.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7fe15506c819 code=0x7ffc0000 [ 127.004279][ T9625] EXT4-fs (loop9): Total free blocks count 0 [ 127.039501][ T9627] netlink: 'syz.7.1990': attribute type 21 has an invalid length. [ 127.049383][ T28] audit: type=1326 audit(1775042292.458:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9619 comm="syz.7.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15506c819 code=0x7ffc0000 [ 127.074127][ T28] audit: type=1326 audit(1775042292.458:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9619 comm="syz.7.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15506c819 code=0x7ffc0000 [ 127.094503][ T9627] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1990'. [ 127.097773][ T9625] EXT4-fs (loop9): Free/Dirty block details [ 127.112620][ T9625] EXT4-fs (loop9): free_blocks=20480 [ 127.117917][ T9625] EXT4-fs (loop9): dirty_blocks=80 [ 127.123170][ T9625] EXT4-fs (loop9): Block reservation details [ 127.129139][ T9625] EXT4-fs (loop9): i_reserved_data_blocks=5 [ 127.302292][ T9645] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1997'. [ 127.500982][ T70] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 2048 with error 28 [ 127.652431][ T6991] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 127.753754][ T9669] loop7: detected capacity change from 0 to 128 [ 127.790297][ T9669] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 127.802616][ T9669] ext4 filesystem being mounted at /250/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.818364][ T9669] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:375: inode #2: comm syz.7.2007: No space for directory leaf checksum. Please run e2fsck -D. [ 127.844192][ T9669] EXT4-fs error (device loop7): htree_dirblock_to_tree:1051: inode #2: comm syz.7.2007: Directory block failed checksum [ 127.903754][ T5741] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.917613][ T9653] chnl_net:caif_netlink_parms(): no params data found [ 127.931845][ T9683] netlink: 'syz.0.2010': attribute type 2 has an invalid length. [ 127.955073][ T9683] netlink: 'syz.0.2010': attribute type 1 has an invalid length. [ 128.063986][ T9653] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.072203][ T9653] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.080388][ T9653] bridge_slave_0: entered allmulticast mode [ 128.087047][ T9653] bridge_slave_0: entered promiscuous mode [ 128.093854][ T9653] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.101717][ T9653] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.109006][ T9653] bridge_slave_1: entered allmulticast mode [ 128.115838][ T9653] bridge_slave_1: entered promiscuous mode [ 128.184184][ T9653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.222724][ T9653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.280778][ T9722] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 128.343815][ T9653] team0: Port device team_slave_0 added [ 128.377762][ T9653] team0: Port device team_slave_1 added [ 128.466588][ T9653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.476162][ T9653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.506854][ T9653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.521057][ T9653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.528043][ T9653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.554790][ T9653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.644400][ T9653] hsr_slave_0: entered promiscuous mode [ 128.650599][ T9653] hsr_slave_1: entered promiscuous mode [ 128.656608][ T9653] debugfs: 'hsr0' already exists in 'hsr' [ 128.662417][ T9653] Cannot create hsr debugfs directory [ 128.904282][ T28] audit: type=1400 audit(1775042294.568:1503): avc: denied { create } for pid=9760 comm="syz.0.2039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 128.944609][ T9653] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.961546][ T28] audit: type=1400 audit(1775042294.568:1504): avc: denied { bind } for pid=9760 comm="syz.0.2039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 128.969472][ T9653] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.071284][ T9653] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.081756][ T9653] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.131151][ T9653] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.140980][ T9653] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.190698][ T9653] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.200595][ T9653] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.253797][ T9653] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 129.262534][ T9653] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 129.271455][ T9653] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 129.280089][ T9653] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 129.315444][ T9653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.327324][ T9653] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.336670][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.343873][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.358854][ T5148] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.365986][ T5148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.424211][ T9653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.480254][ T9653] veth0_vlan: entered promiscuous mode [ 129.488169][ T9653] veth1_vlan: entered promiscuous mode [ 129.503782][ T9653] veth0_macvtap: entered promiscuous mode [ 129.511191][ T9653] veth1_macvtap: entered promiscuous mode [ 129.522476][ T9653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.533727][ T9653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.544395][ T5148] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.553399][ T5148] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.562949][ T5148] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.573106][ T5148] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.612574][ T28] audit: type=1400 audit(1775042295.278:1505): avc: denied { create } for pid=9794 comm="syz.8.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 129.649663][ T28] audit: type=1400 audit(1775042295.278:1506): avc: denied { ioctl } for pid=9794 comm="syz.8.2055" path="socket:[27524]" dev="sockfs" ino=27524 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 129.957287][ T9819] netlink: zone id is out of range [ 129.970972][ T9815] smc: net device bond0 applied user defined pnetid SYZ2 [ 130.036673][ T9826] loop7: detected capacity change from 0 to 2048 [ 130.110849][ T9826] loop7: detected capacity change from 0 to 128 [ 130.369066][ T9850] loop2: detected capacity change from 0 to 4096 [ 130.386230][ T9850] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.411463][ T9850] EXT4-fs (loop2): resizing filesystem from 512 to 0 blocks [ 130.418817][ T9850] EXT4-fs warning (device loop2): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 130.446805][ T9653] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.504482][ T9865] __nla_validate_parse: 4 callbacks suppressed [ 130.504498][ T9865] netlink: 876 bytes leftover after parsing attributes in process `syz.7.2071'. [ 130.520084][ T9865] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2071'. [ 130.533380][ T9868] netlink: 'syz.2.2072': attribute type 4 has an invalid length. [ 130.545089][ T9868] netlink: 'syz.2.2072': attribute type 4 has an invalid length. [ 131.481938][ T9882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.491016][ T9882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.128474][ T9834] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 133.165555][ T9888] sit4: entered allmulticast mode [ 133.358336][ T9908] loop8: detected capacity change from 0 to 1024 [ 133.442534][ T9908] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 133.471689][ T9908] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.510462][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 133.510539][ T28] audit: type=1400 audit(1775042299.158:1509): avc: denied { create } for pid=9907 comm="syz.8.2088" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 133.544899][ T9916] tipc: Started in network mode [ 133.549893][ T9916] tipc: Node identity ac1414aa, cluster identity 4711 [ 133.558056][ T9916] tipc: Enabled bearer , priority 10 [ 133.569711][ T5908] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.577171][ T28] audit: type=1400 audit(1775042299.168:1510): avc: denied { add_name } for pid=9907 comm="syz.8.2088" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 133.599558][ T28] audit: type=1400 audit(1775042299.168:1511): avc: denied { remove_name } for pid=9907 comm="syz.8.2088" name="file0" dev="loop8" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 133.628132][ T28] audit: type=1400 audit(1775042299.168:1512): avc: denied { rename } for pid=9907 comm="syz.8.2088" name="file0" dev="loop8" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 133.682701][ T28] audit: type=1400 audit(1775042299.168:1513): avc: denied { reparent } for pid=9907 comm="syz.8.2088" name="file0" dev="loop8" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 133.722008][ T28] audit: type=1400 audit(1775042299.168:1514): avc: denied { rmdir } for pid=9907 comm="syz.8.2088" name="file0" dev="loop8" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 133.765418][ T9929] loop2: detected capacity change from 0 to 512 [ 133.791043][ T28] audit: type=1326 audit(1775042299.458:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9932 comm="syz.8.2101" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9bff25c819 code=0x0 [ 133.817862][ T9931] loop7: detected capacity change from 0 to 1024 [ 133.832832][ T9929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.847017][ T9931] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 133.851824][ T9929] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 133.862814][ T9931] System zones: 0-1, 3-36 [ 133.875136][ T9931] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.2100: bad orphan inode 134217728 [ 133.894188][ T9931] loop7: lost filesystem error report for type 5 error -117 [ 133.896264][ T9931] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.931206][ T9653] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.039059][ T9943] loop2: detected capacity change from 0 to 4096 [ 134.073248][ T9943] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.151738][ T9653] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.292324][ T9957] loop9: detected capacity change from 0 to 512 [ 134.305440][ T9957] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 134.316536][ T5741] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.317150][ T9957] EXT4-fs (loop9): 1 orphan inode deleted [ 134.331344][ T9957] EXT4-fs (loop9): 1 truncate cleaned up [ 134.337567][ T9957] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.431095][ T6991] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.440279][ T9970] loop7: detected capacity change from 0 to 128 [ 134.447167][ T9970] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 134.460911][ T9970] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 134.539544][ T40] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 134.549255][ T23] tipc: Node number set to 2886997162 [ 134.688183][ T9992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2124'. [ 134.715442][ T28] audit: type=1326 audit(1775042300.378:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9997 comm="syz.7.2128" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe15506c819 code=0x0 [ 134.770489][ T28] audit: type=1400 audit(1775042300.438:1517): avc: denied { attach_queue } for pid=10001 comm="syz.0.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 134.873433][T10016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.891908][T10016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.961102][T10025] loop0: detected capacity change from 0 to 128 [ 135.029399][T10030] syz.0.2139: attempt to access beyond end of device [ 135.029399][T10030] loop0: rw=1, sector=145, nr_sectors = 8 limit=128 [ 135.046390][T10030] syz.0.2139: attempt to access beyond end of device [ 135.046390][T10030] loop0: rw=1, sector=161, nr_sectors = 8 limit=128 [ 135.062126][T10030] syz.0.2139: attempt to access beyond end of device [ 135.062126][T10030] loop0: rw=1, sector=177, nr_sectors = 8 limit=128 [ 135.075550][T10030] syz.0.2139: attempt to access beyond end of device [ 135.075550][T10030] loop0: rw=1, sector=193, nr_sectors = 8 limit=128 [ 135.075612][T10030] syz.0.2139: attempt to access beyond end of device [ 135.075612][T10030] loop0: rw=1, sector=209, nr_sectors = 8 limit=128 [ 135.075645][T10030] syz.0.2139: attempt to access beyond end of device [ 135.075645][T10030] loop0: rw=1, sector=225, nr_sectors = 8 limit=128 [ 135.075766][T10030] syz.0.2139: attempt to access beyond end of device [ 135.075766][T10030] loop0: rw=1, sector=241, nr_sectors = 8 limit=128 [ 135.075800][T10030] syz.0.2139: attempt to access beyond end of device [ 135.075800][T10030] loop0: rw=1, sector=257, nr_sectors = 8 limit=128 [ 135.075870][T10030] syz.0.2139: attempt to access beyond end of device [ 135.075870][T10030] loop0: rw=1, sector=273, nr_sectors = 8 limit=128 [ 135.075902][T10030] syz.0.2139: attempt to access beyond end of device [ 135.075902][T10030] loop0: rw=1, sector=289, nr_sectors = 8 limit=128 [ 135.087030][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b46c000: rx timeout, send abort [ 135.200405][T10034] netlink: 'syz.2.2143': attribute type 1 has an invalid length. [ 135.214062][T10034] bond1: entered promiscuous mode [ 135.219245][T10034] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.268354][T10034] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.294742][T10034] bond1: (slave bond2): making interface the new active one [ 135.297719][T10044] loop0: detected capacity change from 0 to 512 [ 135.303390][T10034] bond2: entered promiscuous mode [ 135.327370][T10044] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.327584][T10034] bond1: (slave bond2): Enslaving as an active interface with an up link [ 135.340564][T10044] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.390315][T10049] loop2: detected capacity change from 0 to 512 [ 135.411461][T10049] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.434476][ T8489] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.445045][ T9653] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.482873][T10055] loop2: detected capacity change from 0 to 128 [ 135.492329][T10055] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 135.511027][T10055] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 135.572925][ T12] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 135.587047][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b46d600: rx timeout, send abort [ 135.674847][ T28] audit: type=1326 audit(1775042301.338:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10075 comm="syz.0.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f712fc819 code=0x7ffc0000 [ 135.675835][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b46c000: abort rx timeout. Force session deactivation [ 136.004638][T10093] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2160'. [ 136.022940][T10093] vxlan1: entered promiscuous mode [ 136.095638][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b46d600: abort rx timeout. Force session deactivation [ 136.289672][ T3305] loop0: p1 p3 < > [ 136.301759][T10088] loop0: p1 p3 < > [ 136.371639][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 136.393885][ T3718] udevd[3718]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 136.428284][ T3718] udevd[3718]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 136.433403][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 136.486991][T10114] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 136.506579][ T70] FAT-fs (loop7): error, invalid FAT chain (i_pos 548, last_block 8) [ 136.539861][ T70] FAT-fs (loop7): Filesystem has been set read-only [ 136.546841][ T70] FAT-fs (loop7): error, corrupted file size (i_pos 548, 522) [ 136.556575][T10112] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.719318][ T9653] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.939744][T10137] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.985356][T10137] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.159628][ T5908] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.271834][T10148] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2186'. [ 137.287403][T10149] netlink: 'syz.7.2184': attribute type 4 has an invalid length. [ 137.295251][T10149] netlink: 17 bytes leftover after parsing attributes in process `syz.7.2184'. [ 137.532734][T10157] netlink: 'syz.2.2190': attribute type 34 has an invalid length. [ 137.759589][T10169] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 137.800033][T10175] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.912874][T10175] EXT4-fs (loop7): shut down requested (2) [ 137.970913][T10198] EXT4-fs: Mount option(s) incompatible with ext2 [ 137.989829][ T5741] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.991039][T10196] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.011423][T10196] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.028957][T10196] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.292259][T10215] EXT4-fs: Ignoring removed i_version option [ 138.312465][T10215] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.364158][T10219] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.385940][T10216] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.420526][T10219] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.495385][ T9653] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.521999][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 138.522013][ T28] audit: type=1326 audit(1775042304.188:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10226 comm="syz.2.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf3bdc819 code=0x7ffc0000 [ 138.561612][ T5741] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.577105][ T5908] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.586601][ T28] audit: type=1326 audit(1775042304.188:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10226 comm="syz.2.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf3bdc819 code=0x7ffc0000 [ 138.652667][ T28] audit: type=1326 audit(1775042304.188:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10226 comm="syz.2.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf3bdc819 code=0x7ffc0000 [ 138.711062][ T28] audit: type=1326 audit(1775042304.188:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10226 comm="syz.2.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf3bdc819 code=0x7ffc0000 [ 138.759928][T10240] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 138.767541][ T28] audit: type=1326 audit(1775042304.188:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10226 comm="syz.2.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1bf3bdc819 code=0x7ffc0000 [ 138.851524][ T28] audit: type=1326 audit(1775042304.188:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10226 comm="syz.2.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf3bdc819 code=0x7ffc0000 [ 138.921701][ T28] audit: type=1326 audit(1775042304.188:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10226 comm="syz.2.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf3bdc819 code=0x7ffc0000 [ 138.983826][ T28] audit: type=1326 audit(1775042304.188:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10226 comm="syz.2.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf3bdc819 code=0x7ffc0000 [ 139.039125][ T28] audit: type=1326 audit(1775042304.188:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10226 comm="syz.2.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf3bdc819 code=0x7ffc0000 [ 139.089296][ T28] audit: type=1326 audit(1775042304.188:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10226 comm="syz.2.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1bf3bdc819 code=0x7ffc0000 [ 139.491849][T10277] set_capacity_and_notify: 12 callbacks suppressed [ 139.491863][T10277] loop0: detected capacity change from 0 to 512 [ 139.528979][T10277] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 139.578676][T10277] EXT4-fs (loop0): 1 truncate cleaned up [ 139.594536][T10277] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.617064][T10285] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2240'. [ 139.654660][T10289] loop7: detected capacity change from 0 to 256 [ 139.755663][ T8489] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.957407][T10318] loop2: detected capacity change from 0 to 512 [ 139.967396][T10318] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.980016][T10318] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 140.093770][ T9653] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.146861][T10334] syzkaller1: entered promiscuous mode [ 140.158723][T10334] syzkaller1: entered allmulticast mode [ 140.179323][T10338] netlink: 180 bytes leftover after parsing attributes in process `syz.8.2263'. [ 140.188692][T10338] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2263'. [ 140.265909][T10331] loop2: detected capacity change from 0 to 32768 [ 140.545458][T10359] netlink: 'syz.8.2272': attribute type 12 has an invalid length. [ 140.575231][T10359] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2272'. [ 140.649711][T10359] netlink: 'syz.8.2272': attribute type 12 has an invalid length. [ 140.667673][T10359] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2272'. [ 140.737427][T10379] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2281'. [ 141.010951][T10402] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 141.202858][T10420] IPv6: addrconf: prefix option has invalid lifetime [ 141.451947][T10437] loop9: detected capacity change from 0 to 256 [ 141.814745][T10472] loop7: detected capacity change from 0 to 2048 [ 141.844300][T10472] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.858627][T10472] EXT4-fs error (device loop7): ext4_find_dest_de:2050: inode #2: block 16: comm syz.7.2317: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=15, rec_len=8, size=2048 fake=0 [ 141.996377][T10472] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #12: block 2: comm syz.7.2317: lblock 0 mapped to illegal pblock 2 (length 1) [ 142.077323][ T5741] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.175047][T10497] loop7: detected capacity change from 0 to 512 [ 142.181937][T10497] EXT4-fs: Ignoring removed nobh option [ 142.188289][T10497] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 142.206672][T10497] EXT4-fs (loop7): 1 truncate cleaned up [ 142.219593][T10497] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.258712][ T5741] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.312340][ T314] Bluetooth: hci0: Frame reassembly failed (-84) [ 142.482142][T10509] netlink: 'syz.8.2331': attribute type 15 has an invalid length. [ 142.490188][T10509] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2331'. [ 142.503381][ T40] netdevsim netdevsim8 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 142.503406][T10509] netlink: 'syz.8.2331': attribute type 15 has an invalid length. [ 142.512428][ T40] netdevsim netdevsim8 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 142.520238][T10509] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2331'. [ 142.528960][ T40] netdevsim netdevsim8 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 142.546329][ T40] netdevsim netdevsim8 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 142.826217][T10521] PID 10521 killed due to inadequate hugepage pool [ 142.937904][T10526] loop0: detected capacity change from 0 to 512 [ 144.379317][ T4935] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 144.380520][ T3546] Bluetooth: hci0: command 0x1003 tx timeout [ 144.742154][T10460] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 144.951700][T10557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2351'. [ 144.996539][T10561] loop9: detected capacity change from 0 to 512 [ 145.038274][T10561] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 145.071475][T10561] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 145.255750][T10548] loop0: detected capacity change from 0 to 32768 [ 145.279527][T10561] EXT4-fs (loop9): warning: checktime reached, running e2fsck is recommended [ 145.289125][T10561] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 145.319477][ T3300] loop0: p1 p3 < > [ 145.326430][T10548] loop0: p1 p3 < > [ 145.352419][T10561] System zones: 0-2, 18-18, 34-34 [ 145.389342][T10561] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.2353: bad orphan inode 15 [ 145.402153][T10561] loop9: lost filesystem error report for type 5 error -117 [ 145.409185][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 145.422901][ C0] EXT4-fs (loop9): initial error at time 1775042311: ext4_orphan_get:1423 [ 145.431445][ C0] EXT4-fs (loop9): last error at time 1775042311: ext4_orphan_get:1423 [ 145.439991][T10561] ext4_test_bit(bit=14, block=18) = 1 [ 145.452398][T10561] is_bad_inode(inode)=0 [ 145.456794][T10561] NEXT_ORPHAN(inode)=2264924160 [ 145.462917][T10561] max_ino=32 [ 145.469988][T10561] i_nlink=0 [ 145.486401][T10561] EXT4-fs error (device loop9): ext4_do_update_inode:5602: inode #15: comm syz.9.2353: corrupted inode contents [ 145.519211][T10561] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 145.520189][T10561] EXT4-fs error (device loop9): ext4_dirty_inode:6495: inode #15: comm syz.9.2353: mark_inode_dirty error [ 145.542026][T10561] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 145.542176][T10561] EXT4-fs error (device loop9): ext4_do_update_inode:5602: inode #15: comm syz.9.2353: corrupted inode contents [ 145.563294][T10561] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 145.563452][T10561] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2999: inode #15: comm syz.9.2353: mark_inode_dirty error [ 145.629206][T10561] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 145.629518][T10561] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3002: inode #15: comm syz.9.2353: mark inode dirty (error -117) [ 145.658895][T10561] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 145.659418][T10561] EXT4-fs warning (device loop9): ext4_evict_inode:285: xattr delete (err -117) [ 145.678512][T10561] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.703955][T10561] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2353: bg 0: block 80: padding at end of block bitmap is not set [ 145.726293][T10594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2363'. [ 145.779485][ T6991] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.873410][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 145.873426][ T28] audit: type=1400 audit(1775042311.538:1591): avc: denied { firmware_load } for pid=10605 comm="syz.0.2369" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 145.963591][T10610] loop0: detected capacity change from 0 to 256 [ 145.980043][T10610] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 146.025154][T10613] xt_hashlimit: size too large, truncated to 1048576 [ 146.281137][ T28] audit: type=1400 audit(1775042311.948:1592): avc: denied { listen } for pid=10639 comm="syz.8.2383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 146.319314][ T28] audit: type=1400 audit(1775042311.948:1593): avc: denied { accept } for pid=10639 comm="syz.8.2383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 146.350803][ T28] audit: type=1400 audit(1775042312.008:1594): avc: denied { shutdown } for pid=10639 comm="syz.8.2383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 146.415967][T10650] macvlan2: entered promiscuous mode [ 146.425137][T10650] team0: entered promiscuous mode [ 146.441529][ T3392] Process accounting resumed [ 146.449739][T10650] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 146.464269][T10650] team0: left promiscuous mode [ 146.529899][T10654] loop9: detected capacity change from 0 to 2048 [ 146.573130][T10661] loop2: detected capacity change from 0 to 128 [ 146.584314][T10661] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 146.606499][T10661] ext4 filesystem being mounted at /82/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 146.611780][ T3305] loop9: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22 [ 146.660079][ T9653] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 146.660686][ T3305] loop9: p4 size 8388608 extends beyond EOD, truncated [ 147.608331][T10654] loop9: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22 [ 147.611801][T10654] loop9: p4 size 8388608 extends beyond EOD, truncated [ 147.855332][T10684] syz.0.2400 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 147.880927][T10684] CPU: 0 UID: 0 PID: 10684 Comm: syz.0.2400 Tainted: G W syzkaller #0 PREEMPT(full) [ 147.880976][T10684] Tainted: [W]=WARN [ 147.880982][T10684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 147.880991][T10684] Call Trace: [ 147.880997][T10684] [ 147.881006][T10684] __dump_stack+0x1d/0x30 [ 147.881033][T10684] dump_stack_lvl+0x95/0xd0 [ 147.881139][T10684] dump_stack+0x15/0x1b [ 147.881161][T10684] dump_header+0x80/0x240 [ 147.881181][T10684] oom_kill_process+0x295/0x350 [ 147.881237][T10684] out_of_memory+0x97d/0xb80 [ 147.881256][T10684] try_charge_memcg+0x62e/0xa10 [ 147.881291][T10684] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 147.881325][T10684] __swap_cache_prepare_and_add+0x67/0x460 [ 147.881350][T10684] ? alloc_pages_mpol+0x217/0x260 [ 147.881456][T10684] swap_cache_alloc_folio+0xa2/0x120 [ 147.881480][T10684] swap_cluster_readahead+0x36b/0x3d0 [ 147.881562][T10684] swapin_readahead+0xde/0x840 [ 147.881586][T10684] ? _raw_spin_unlock+0x9/0x30 [ 147.881619][T10684] ? swap_put_entries_cluster+0x385/0x3a0 [ 147.881647][T10684] ? swap_put_entries_cluster+0x71/0x3a0 [ 147.881676][T10684] ? __rcu_read_unlock+0x4e/0x70 [ 147.881760][T10684] ? swap_cache_get_folio+0x26f/0x280 [ 147.881819][T10684] do_swap_page+0x2fe/0x21e0 [ 147.881843][T10684] ? css_rstat_updated+0xbb/0x280 [ 147.882046][T10684] ? __rcu_read_lock+0x36/0x50 [ 147.882067][T10684] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 147.882130][T10684] handle_mm_fault+0xb46/0x3020 [ 147.882159][T10684] ? vma_start_read+0x1c7/0x2c0 [ 147.882189][T10684] do_user_addr_fault+0x62f/0x1050 [ 147.882303][T10684] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 147.882393][T10684] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 147.882455][T10684] ? trace_page_fault_user+0x1f/0xe0 [ 147.882478][T10684] exc_page_fault+0x62/0xa0 [ 147.882494][T10684] asm_exc_page_fault+0x26/0x30 [ 147.882575][T10684] RIP: 0033:0x7f0f712fd336 [ 147.882595][T10684] Code: 00 00 00 00 48 85 ff 74 0b e9 46 f6 ff ff 66 0f 1f 44 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 83 ec 28 31 f6 <64> 48 8b 04 25 28 00 00 00 48 89 44 24 18 8d 07 48 69 c0 83 de 1b [ 147.882673][T10684] RSP: 002b:00007fffd93b6040 EFLAGS: 00010246 [ 147.882765][T10684] RAX: 000000000002411a RBX: 00007f0f71575fa0 RCX: 0000000000023e38 [ 147.882776][T10684] RDX: 00000000000002e2 RSI: 0000000000000000 RDI: 00000000000003e8 [ 147.882787][T10684] RBP: 00007f0f71577da0 R08: 000000002c04485f R09: 7fffffffffffffff [ 147.882798][T10684] R10: 3fffffffffffffff R11: 0000000000000246 R12: 0000000000024270 [ 147.882837][T10684] R13: 00007f0f71575fac R14: 0000000000023f68 R15: 00007fffd93b6170 [ 147.882937][T10684] [ 147.885832][T10684] memory: usage 307200kB, limit 307200kB, failcnt 113 [ 148.154533][T10684] memory+swap: usage 307488kB, limit 9007199254740988kB, failcnt 0 [ 148.162615][T10684] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 148.172752][T10684] Memory cgroup stats for /syz0: [ 148.173026][T10684] cache 0 [ 148.201102][T10692] tipc: Started in network mode [ 148.210983][T10684] rss 0 [ 148.214089][T10684] shmem 0 [ 148.214243][T10692] tipc: Node identity 00000000400000000000000000000001, cluster identity 4711 [ 148.217456][T10684] mapped_file 0 [ 148.242741][T10692] tipc: Enabling of bearer rejected, failed to enable media [ 148.244820][T10684] dirty 0 [ 148.261917][T10684] writeback 0 [ 148.269338][T10684] workingset_refault_anon 3 [ 148.274045][T10684] workingset_refault_file 0 [ 148.293928][T10684] swap 294912 [ 148.309570][T10684] swapcached 307200 [ 148.313464][T10684] pgpgin 40867 [ 148.316834][T10684] pgpgout 40867 [ 148.333571][T10684] pgfault 66598 [ 148.333659][T10696] loop8: detected capacity change from 0 to 512 [ 148.344365][T10696] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 148.358532][T10684] pgmajfault 5 [ 148.372245][T10696] EXT4-fs (loop8): 1 truncate cleaned up [ 148.373559][T10684] inactive_anon 0 [ 148.382288][T10696] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.407698][T10684] active_anon 0 [ 148.418774][T10684] inactive_file 0 [ 148.445919][T10684] active_file 0 [ 148.462515][T10684] unevictable 0 [ 148.479758][T10684] hierarchical_memory_limit 314572800 [ 148.502248][ T3000] loop9: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22 [ 148.503566][T10684] hierarchical_memsw_limit 9223372036854771712 [ 148.601174][ T3000] loop9: p4 size 8388608 extends beyond EOD, truncated [ 148.632703][ T28] audit: type=1400 audit(1775042314.288:1595): avc: denied { ioctl } for pid=10705 comm="syz.2.2409" path="socket:[30147]" dev="sockfs" ino=30147 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 148.662319][ T5908] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.703391][T10684] total_cache 0 [ 148.706857][T10684] total_rss 0 [ 148.748344][T10717] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2414'. [ 148.750275][T10684] total_shmem 0 [ 148.775556][T10684] total_mapped_file 0 [ 148.784412][T10684] total_dirty 0 [ 148.787952][T10684] total_writeback 0 [ 148.800719][T10684] total_workingset_refault_anon 3 [ 148.805743][T10684] total_workingset_refault_file 0 [ 148.823350][T10684] total_swap 294912 [ 148.827162][T10684] total_swapcached 307200 [ 148.834521][T10684] total_pgpgin 40867 [ 148.863165][T10728] loop2: detected capacity change from 0 to 512 [ 148.870763][T10684] total_pgpgout 40867 [ 148.874736][T10684] total_pgfault 66598 [ 148.878728][T10684] total_pgmajfault 5 [ 148.887717][T10728] EXT4-fs: Ignoring removed nobh option [ 148.893977][T10684] total_inactive_anon 0 [ 148.898651][T10684] total_active_anon 0 [ 148.903233][T10684] total_inactive_file 0 [ 148.907643][T10684] total_active_file 0 [ 148.913053][T10684] total_unevictable 0 [ 148.917311][T10684] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2400,pid=10684,uid=0 [ 148.919381][T10728] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 148.932359][T10684] Memory cgroup out of memory: Killed process 10684 (syz.0.2400) total-vm:96080kB, anon-rss:1228kB, file-rss:22292kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 148.965394][T10728] EXT4-fs (loop2): 1 truncate cleaned up [ 148.974800][T10728] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.096400][T10728] EXT4-fs (loop2): shut down requested (0) [ 149.183011][ T9653] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.492048][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 149.504038][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop9p5, 10) failed: No such file or directory [ 149.515281][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 149.517010][ T3718] udevd[3718]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 149.526494][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop9p6, 10) failed: No such file or directory [ 149.677981][T10770] udevd[10770]: inotify_add_watch(7, /dev/loop9p7, 10) failed: No such file or directory [ 149.697021][T10775] udevd[10775]: inotify_add_watch(7, /dev/loop9p12, 10) failed: No such file or directory [ 149.708369][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop9p14, 10) failed: No such file or directory [ 149.713485][T10772] udevd[10772]: inotify_add_watch(7, /dev/loop9p9, 10) failed: No such file or directory [ 149.719314][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop9p17, 10) failed: No such file or directory [ 149.954187][T10794] loop8: detected capacity change from 0 to 512 [ 149.993977][T10794] EXT4-fs: Ignoring removed i_version option [ 150.009827][T10796] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2442'. [ 150.016596][T10794] EXT4-fs: Ignoring removed bh option [ 150.050112][T10796] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2442'. [ 150.088915][T10796] netlink: 'syz.7.2442': attribute type 6 has an invalid length. [ 150.099379][T10796] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2442'. [ 150.117571][T10794] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.178487][T10796] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2442'. [ 150.212573][T10794] ext4 filesystem being mounted at /325/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 150.219238][T10796] netlink: 'syz.7.2442': attribute type 6 has an invalid length. [ 150.279658][ T5908] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.411855][T10807] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 150.439257][T10807] vhci_hcd vhci_hcd.2: default hub control req: 030f vfffa i0001 l0 [ 150.862766][T10828] loop9: detected capacity change from 0 to 256 [ 150.898989][T10828] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 150.948951][T10832] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 151.143610][T10836] bridge0: entered promiscuous mode [ 151.185025][T10836] bridge0: entered allmulticast mode [ 151.623661][T10864] loop7: detected capacity change from 0 to 128 [ 151.743669][T10869] loop7: detected capacity change from 0 to 512 [ 151.811324][T10869] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.824440][T10869] ext4 filesystem being mounted at /354/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.963129][ T5741] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.567196][T10926] syzkaller1: entered promiscuous mode [ 152.579969][T10926] syzkaller1: entered allmulticast mode [ 152.895568][T10945] netlink: 'syz.0.2504': attribute type 18 has an invalid length. [ 152.931412][T10945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2504'. [ 152.952093][ T28] audit: type=1326 audit(1775042318.618:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10958 comm="syz.9.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d44dec819 code=0x7ffc0000 [ 152.984919][T10945] netlink: 'syz.0.2504': attribute type 18 has an invalid length. [ 152.992841][ T314] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.029241][ T314] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.038067][ T314] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.056582][ T28] audit: type=1326 audit(1775042318.618:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10958 comm="syz.9.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d44dec819 code=0x7ffc0000 [ 153.059230][T10945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2504'. [ 153.089137][ T314] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.109236][ T28] audit: type=1326 audit(1775042318.618:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10958 comm="syz.9.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d44dec819 code=0x7ffc0000 [ 153.150336][ T28] audit: type=1326 audit(1775042318.618:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10958 comm="syz.9.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5d44dec819 code=0x7ffc0000 [ 153.186868][T10961] loop0: detected capacity change from 0 to 512 [ 153.203623][ T28] audit: type=1326 audit(1775042318.658:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10958 comm="syz.9.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d44dec819 code=0x7ffc0000 [ 153.227529][T10961] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 153.238913][ T28] audit: type=1326 audit(1775042318.668:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10958 comm="syz.9.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d44dec819 code=0x7ffc0000 [ 153.265378][ T28] audit: type=1326 audit(1775042318.768:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10958 comm="syz.9.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d44dec819 code=0x7ffc0000 [ 153.302332][ T28] audit: type=1326 audit(1775042318.768:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10958 comm="syz.9.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d44dec819 code=0x7ffc0000 [ 153.326253][T10961] EXT4-fs (loop0): 1 truncate cleaned up [ 153.332152][ T28] audit: type=1326 audit(1775042318.768:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10958 comm="syz.9.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d44dec819 code=0x7ffc0000 [ 153.335232][T10961] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.356153][ T28] audit: type=1326 audit(1775042318.768:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10958 comm="syz.9.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d44dec819 code=0x7ffc0000 [ 153.415787][T10971] pimreg: entered allmulticast mode [ 153.445789][ T8489] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.928396][T11007] loop9: detected capacity change from 0 to 1024 [ 153.936367][T11007] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 153.946986][T11007] System zones: 0-1, 3-36 [ 153.951797][T11007] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.2526: bad orphan inode 134217728 [ 153.962689][T11007] loop9: lost filesystem error report for type 5 error -117 [ 153.963431][T11007] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.999735][ T6991] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.208720][T11010] netlink: 'syz.9.2527': attribute type 10 has an invalid length. [ 154.216984][T11013] loop7: detected capacity change from 0 to 4096 [ 154.222133][T11010] netlink: 84 bytes leftover after parsing attributes in process `syz.9.2527'. [ 154.234708][T11013] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.242214][T11010] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 154.295264][ T5741] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.418597][T11024] bridge0: entered promiscuous mode [ 154.424062][T11024] bridge0: entered allmulticast mode [ 154.750683][T11054] loop7: detected capacity change from 0 to 512 [ 154.759064][T11054] EXT4-fs: inline encryption not supported [ 154.773739][T11054] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 154.789616][T11054] EXT4-fs (loop7): 1 truncate cleaned up [ 154.796192][T11054] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.817206][ T5741] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.589899][T11094] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 155.715630][T11117] loop9: detected capacity change from 0 to 512 [ 155.741531][T11117] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.769307][T11117] ext4 filesystem being mounted at /269/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.880534][ T6991] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.013757][T11134] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2567'. [ 156.022950][T11134] bridge_slave_0: default FDB implementation only supports local addresses [ 156.032280][T11134] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2567'. [ 156.041307][T11134] bridge_slave_0: default FDB implementation only supports local addresses [ 156.152402][T11145] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 156.160688][T11145] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 156.675134][ T3392] IPVS: starting estimator thread 0... [ 156.681059][T11172] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 156.688424][ C1] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 156.697467][ C1] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 156.779319][T11173] IPVS: using max 2544 ests per chain, 127200 per kthread [ 157.181165][T11153] syz.9.2575 (11153) used greatest stack depth: 8448 bytes left [ 157.207286][T11184] loop9: detected capacity change from 0 to 1024 [ 157.214498][T11184] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 157.224702][T11184] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 157.234701][T11184] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 157.245799][T11184] EXT4-fs error (device loop9): ext4_get_journal_inode:5888: inode #5: comm syz.9.2589: unexpected bad inode w/o EXT4_IGET_BAD [ 157.259471][T11184] loop9: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 157.260342][T11184] EXT4-fs (loop9): no journal found [ 157.269553][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 157.269571][ C1] EXT4-fs (loop9): initial error at time 1775042322: ext4_get_journal_inode:5888: inode 5 [ 157.269594][ C1] EXT4-fs (loop9): last error at time 1775042322: ext4_get_journal_inode:5888: inode 5 [ 157.300904][T11184] EXT4-fs (loop9): can't get journal size [ 157.307196][T11184] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 157.320605][T11184] EXT4-fs (loop9): ext4_remount: Checksum for group 0 failed (42152!=20869) [ 157.356662][ T6991] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.365731][T11020] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 157.392407][T11187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2591'. [ 157.434185][T11189] bond1: (slave vlan0): Opening slave failed [ 157.477309][T11199] loop9: detected capacity change from 0 to 2048 [ 157.500552][T11199] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.519364][T11199] ext4 filesystem being mounted at /282/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.550750][T11194] SELinux: failed to load policy [ 157.571752][ T6991] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.633933][T11217] loop9: detected capacity change from 0 to 512 [ 157.643014][T11217] EXT4-fs: Ignoring removed bh option [ 157.649875][T11217] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 157.663328][T11217] EXT4-fs (loop9): 1 truncate cleaned up [ 157.669931][T11217] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.712716][ T6991] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.758398][T11231] loop0: detected capacity change from 0 to 128 [ 157.766470][T11231] EXT4-fs: Ignoring removed bh option [ 157.774009][T11231] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 157.786534][T11231] ext4 filesystem being mounted at /185/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 157.831745][T11237] loop9: detected capacity change from 0 to 512 [ 157.849482][T11231] loop0: detected capacity change from 128 to 0 [ 157.857802][T11237] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.2611: inode has both inline data and extents flags [ 157.863022][T11231] EXT4-fs error (device loop0): __ext4_find_entry:1615: inode #2: comm syz.0.2609: reading directory lblock 0 [ 157.883210][T11231] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 157.891731][T11237] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 157.891827][T11231] EXT4-fs (loop0): I/O error while writing superblock [ 157.891946][T11237] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.2611: couldn't read orphan inode 15 (err -117) [ 157.901015][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 157.901033][ C1] EXT4-fs (loop9): initial error at time 1775042323: ext4_orphan_get:1397: inode 15 [ 157.901060][ C1] EXT4-fs (loop9): last error at time 1775042323: ext4_orphan_get:1397: inode 15 [ 157.960072][T11237] loop9: lost filesystem error report for type 5 error -117 [ 157.967070][T11237] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.967822][ T8489] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 158.036893][ T6991] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.046950][ T9504] EXT4-fs error (device loop0): ext4_get_inode_loc:4935: inode #2: block 35: comm syz.0.1937: unable to read itable block [ 158.060322][ T9504] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 158.068609][ T9504] EXT4-fs (loop0): I/O error while writing superblock [ 158.079563][ T9504] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6291: IO failure [ 158.096956][ T9504] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 158.105653][ T9504] EXT4-fs (loop0): I/O error while writing superblock [ 158.116637][ T9504] EXT4-fs error (device loop0): ext4_dirty_inode:6495: inode #2: comm syz.0.1937: mark_inode_dirty error [ 158.128075][ T9504] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 158.136698][ T9504] EXT4-fs (loop0): I/O error while writing superblock [ 158.145571][ T70] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4920: inode #12: block 36: comm kworker/u8:4: unable to read itable block [ 158.162000][ T70] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 158.171325][ T70] EXT4-fs (loop0): I/O error while writing superblock [ 158.178151][ T70] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4920: inode #2: block 35: comm kworker/u8:4: unable to read itable block [ 158.192180][ T70] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 158.206772][ T70] EXT4-fs (loop0): I/O error while writing superblock [ 158.219095][ T9504] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 158.240595][ T9504] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 158.248875][ T9504] EXT4-fs (loop0): I/O error while writing superblock [ 158.488457][T11273] loop2: detected capacity change from 0 to 8192 [ 158.506948][T11272] bio_check_eod: 102 callbacks suppressed [ 158.506962][T11272] syz.2.2626: attempt to access beyond end of device [ 158.506962][T11272] loop2: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 158.553629][T11272] Buffer I/O error on dev loop2, logical block 57847, async page read [ 158.563370][T11273] syz.2.2626: attempt to access beyond end of device [ 158.563370][T11273] loop2: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 158.577526][T11273] Buffer I/O error on dev loop2, logical block 57847, async page read [ 158.585821][T11273] syz.2.2626: attempt to access beyond end of device [ 158.585821][T11273] loop2: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 158.606434][T11273] Buffer I/O error on dev loop2, logical block 57847, async page read [ 158.663542][ T70] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.676477][ T70] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.732287][ T70] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.742930][ T70] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.770789][T11303] loop9: detected capacity change from 0 to 128 [ 158.798588][T11303] FAT-fs (loop9): bogus logical sector size 759 [ 158.810388][T11278] chnl_net:caif_netlink_parms(): no params data found [ 158.830979][T11303] FAT-fs (loop9): Can't find a valid FAT filesystem [ 158.841927][ T70] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.852544][ T70] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.902259][T11307] loop7: detected capacity change from 0 to 512 [ 158.908831][T11307] EXT4-fs: Ignoring removed orlov option [ 158.952253][ T70] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.960321][T11307] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.973057][ T70] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.985645][T11307] ext4 filesystem being mounted at /383/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 159.012760][T11307] EXT4-fs error (device loop7): ext4_do_update_inode:5602: inode #2: comm syz.7.2638: corrupted inode contents [ 159.036149][T11307] EXT4-fs error (device loop7): ext4_dirty_inode:6495: inode #2: comm syz.7.2638: mark_inode_dirty error [ 159.083212][T11307] EXT4-fs error (device loop7): ext4_do_update_inode:5602: inode #2: comm syz.7.2638: corrupted inode contents [ 159.100440][T11322] EXT4-fs error (device loop7): ext4_do_update_inode:5602: inode #2: comm syz.7.2638: corrupted inode contents [ 159.113037][T11322] EXT4-fs error (device loop7): ext4_dirty_inode:6495: inode #2: comm syz.7.2638: mark_inode_dirty error [ 159.124958][T11322] EXT4-fs error (device loop7): ext4_do_update_inode:5602: inode #2: comm syz.7.2638: corrupted inode contents [ 159.130650][T11278] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.146283][T11278] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.153774][T11278] bridge_slave_0: entered allmulticast mode [ 159.160411][T11278] bridge_slave_0: entered promiscuous mode [ 159.166267][T11322] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.2638: mark_inode_dirty error [ 159.187837][T11278] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.199953][T11278] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.213280][T11278] bridge_slave_1: entered allmulticast mode [ 159.220409][T11278] bridge_slave_1: entered promiscuous mode [ 159.236471][T11307] EXT4-fs warning (device loop7): ext4_es_cache_extent:1082: inode #2: comm syz.7.2638: ES cache extent failed: add [0,1,23,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 159.236471][T11307] [ 159.264280][T11307] EXT4-fs error (device loop7): ext4_do_update_inode:5602: inode #2: comm syz.7.2638: corrupted inode contents [ 159.276693][T11307] EXT4-fs error (device loop7): ext4_append:88: inode #2: comm syz.7.2638: mark_inode_dirty error [ 159.288355][T11307] EXT4-fs error (device loop7) in ext4_append:100: Corrupt filesystem [ 159.335454][ T70] bridge_slave_1: left allmulticast mode [ 159.342937][ T70] bridge_slave_1: left promiscuous mode [ 159.350203][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.359681][ T5741] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.383911][ T70] bridge_slave_0: left allmulticast mode [ 159.389834][ T70] bridge_slave_0: left promiscuous mode [ 159.404310][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.549325][T11368] loop9: detected capacity change from 0 to 512 [ 159.559127][T11368] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 159.562414][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.582902][T11368] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.2653: iget: bad i_size value: 38620345925642 [ 159.604425][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.613228][T11368] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 159.613599][T11368] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.2653: couldn't read orphan inode 15 (err -117) [ 159.622734][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 159.622753][ C0] EXT4-fs (loop9): initial error at time 1775042325: ext4_orphan_get:1397: inode 15 [ 159.622778][ C0] EXT4-fs (loop9): last error at time 1775042325: ext4_orphan_get:1397: inode 15 [ 159.661544][ T70] bond0 (unregistering): Released all slaves [ 159.670375][T11278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.679468][T11368] loop9: lost filesystem error report for type 5 error -117 [ 159.681935][T11278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.699209][T11368] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.723839][ T70] tipc: Disabling bearer [ 159.729092][ T70] tipc: Left network mode [ 159.750918][ T70] hsr_slave_0: left promiscuous mode [ 159.757869][ T70] hsr_slave_1: left promiscuous mode [ 159.763913][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.775581][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.783229][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.792471][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.803825][ T70] veth1_macvtap: left promiscuous mode [ 159.809489][ T70] veth0_macvtap: left promiscuous mode [ 159.815091][ T70] veth1_vlan: left promiscuous mode [ 159.820519][ T70] veth0_vlan: left promiscuous mode [ 159.852054][T11373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.871112][T11373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.913617][ T70] team0 (unregistering): Port device team_slave_1 removed [ 159.923390][ T70] team0 (unregistering): Port device team_slave_0 removed [ 159.973162][T11372] can0: slcan on ttyS3. [ 159.987224][T11278] team0: Port device team_slave_0 added [ 160.001307][T11278] team0: Port device team_slave_1 added [ 160.035736][T11278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.042941][T11373] can0 (unregistered): slcan off ttyS3. [ 160.048363][T11278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.085840][T11278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.108214][T11278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.127661][T11278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.169554][T11278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.232764][T11396] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2658'. [ 160.237691][T11278] hsr_slave_0: entered promiscuous mode [ 160.251028][T11278] hsr_slave_1: entered promiscuous mode [ 160.258220][T11278] debugfs: 'hsr0' already exists in 'hsr' [ 160.264816][T11278] Cannot create hsr debugfs directory [ 160.399522][ T12] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm kworker/u8:0: bg 0: block 5: invalid block bitmap [ 160.416834][ T12] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 160.442422][ T12] EXT4-fs (loop9): This should not happen!! Data will be lost [ 160.442422][ T12] [ 160.457760][ T12] EXT4-fs (loop9): Total free blocks count 0 [ 160.464516][ T12] EXT4-fs (loop9): Free/Dirty block details [ 160.471251][ T12] EXT4-fs (loop9): free_blocks=0 [ 160.476680][ T12] EXT4-fs (loop9): dirty_blocks=13968 [ 160.482811][ T12] EXT4-fs (loop9): Block reservation details [ 160.488920][ T12] EXT4-fs (loop9): i_reserved_data_blocks=13968 [ 160.505787][ T12] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 160.525875][ T6991] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 160.689504][T11437] netlink: 'syz.9.2662': attribute type 15 has an invalid length. [ 160.810508][T11456] netlink: 'syz.7.2671': attribute type 39 has an invalid length. [ 160.851697][T11278] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 160.864471][T11278] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 160.870144][T11278] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 160.872762][T11278] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 160.952867][T11278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.982735][ T28] kauditd_printk_skb: 98 callbacks suppressed [ 160.982750][ T28] audit: type=1326 audit(1775042326.648:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11481 comm="syz.7.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15506c819 code=0x7ffc0000 [ 161.014893][T11278] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.042992][ T28] audit: type=1326 audit(1775042326.648:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11481 comm="syz.7.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15506c819 code=0x7ffc0000 [ 161.067706][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.074779][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.094035][ T28] audit: type=1326 audit(1775042326.688:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11481 comm="syz.7.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15506c819 code=0x7ffc0000 [ 161.118636][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.125730][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.141740][ T28] audit: type=1326 audit(1775042326.688:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11481 comm="syz.7.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15506c819 code=0x7ffc0000 [ 161.161868][T11278] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 161.176041][ T28] audit: type=1326 audit(1775042326.688:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11481 comm="syz.7.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe15506c819 code=0x7ffc0000 [ 161.201322][T11278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 161.266444][ T28] audit: type=1326 audit(1775042326.688:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11481 comm="syz.7.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15506c819 code=0x7ffc0000 [ 161.370674][ T28] audit: type=1326 audit(1775042326.688:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11481 comm="syz.7.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15506c819 code=0x7ffc0000 [ 161.382480][T11278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.404253][ T28] audit: type=1326 audit(1775042326.698:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11481 comm="syz.7.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15506c819 code=0x7ffc0000 [ 161.437964][ T28] audit: type=1326 audit(1775042326.698:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11481 comm="syz.7.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15506c819 code=0x7ffc0000 [ 161.473173][ T28] audit: type=1326 audit(1775042326.698:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11481 comm="syz.7.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe15506c819 code=0x7ffc0000 [ 161.505468][T11278] veth0_vlan: entered promiscuous mode [ 161.513607][T11278] veth1_vlan: entered promiscuous mode [ 161.548495][T11541] netlink: 'syz.7.2687': attribute type 4 has an invalid length. [ 161.557573][T11541] netlink: 'syz.7.2687': attribute type 4 has an invalid length. [ 161.589080][T11278] veth0_macvtap: entered promiscuous mode [ 161.648068][T11278] veth1_macvtap: entered promiscuous mode [ 161.698622][T11278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.743171][T11278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.812934][ T5148] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.822194][ T314] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.858770][T11576] tipc: Failed to remove unknown binding: 66,1,1/0:3620799459/3620799461 [ 161.881758][T11580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.886224][T11576] tipc: Failed to remove unknown binding: 66,1,1/0:3620799459/3620799461 [ 161.909310][T11580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.946147][T11580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.967622][T11580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.207965][ T314] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.216902][ T314] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.323203][T11618] syz_tun: entered allmulticast mode [ 162.386504][T11615] syz_tun: left allmulticast mode [ 162.744782][T11688] netlink: 'syz.2.2716': attribute type 83 has an invalid length. [ 162.823686][T11704] loop9: detected capacity change from 0 to 128 [ 162.839994][T11704] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 162.889614][T11704] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 162.950750][T11704] EXT4-fs (loop9): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 162.998259][ T6991] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 163.036823][T11733] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2727'. [ 163.177572][T11754] xt_hashlimit: size too large, truncated to 1048576 [ 163.329775][T11767] loop3: detected capacity change from 0 to 512 [ 163.352009][T11767] EXT4-fs: Ignoring removed orlov option [ 163.388630][T11767] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.440112][T11767] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.476796][T11767] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #2: comm syz.3.2733: corrupted inode contents [ 163.497131][T11767] EXT4-fs error (device loop3): ext4_dirty_inode:6495: inode #2: comm syz.3.2733: mark_inode_dirty error [ 163.512281][T11767] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #2: comm syz.3.2733: corrupted inode contents [ 163.526238][T11767] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #2: comm syz.3.2733: corrupted inode contents [ 163.539248][T11767] EXT4-fs error (device loop3): ext4_dirty_inode:6495: inode #2: comm syz.3.2733: mark_inode_dirty error [ 163.551774][T11767] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #2: comm syz.3.2733: corrupted inode contents [ 163.564064][T11767] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.2733: mark_inode_dirty error [ 163.577858][T11767] EXT4-fs warning (device loop3): ext4_es_cache_extent:1082: inode #2: comm syz.3.2733: ES cache extent failed: add [0,1,23,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 163.577858][T11767] [ 163.602363][T11767] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #2: comm syz.3.2733: corrupted inode contents [ 163.615114][T11767] EXT4-fs error (device loop3): ext4_append:88: inode #2: comm syz.3.2733: mark_inode_dirty error [ 163.626020][T11767] EXT4-fs error (device loop3) in ext4_append:100: Corrupt filesystem [ 163.658091][T11278] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.955402][T11847] loop2: detected capacity change from 0 to 8192 [ 163.979118][T11851] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2764'. [ 164.130877][ T1557] IPVS: starting estimator thread 0... [ 164.220597][T11863] IPVS: using max 2496 ests per chain, 124800 per kthread [ 164.530558][T11877] chnl_net:caif_netlink_parms(): no params data found [ 164.700817][T11906] loop3: detected capacity change from 0 to 512 [ 164.711936][T11877] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.724053][T11877] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.724517][T11906] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.731407][T11877] bridge_slave_0: entered allmulticast mode [ 164.745540][ T23] kernel read not supported for file bpf-prog (pid: 23 comm: kworker/1:0) [ 164.750180][T11877] bridge_slave_0: entered promiscuous mode [ 164.768386][T11877] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.775602][T11877] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.784193][T11877] bridge_slave_1: entered allmulticast mode [ 164.793880][T11877] bridge_slave_1: entered promiscuous mode [ 164.821647][T11278] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.823470][T11877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.841059][T11877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.867527][T11877] team0: Port device team_slave_0 added [ 164.881537][T11877] team0: Port device team_slave_1 added [ 164.906080][T11877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.919856][T11877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.947783][T11877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.959359][T11877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.966361][T11877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.992618][T11877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.020240][T11877] hsr_slave_0: entered promiscuous mode [ 165.026491][T11877] hsr_slave_1: entered promiscuous mode [ 165.033766][T11877] debugfs: 'hsr0' already exists in 'hsr' [ 165.039663][T11877] Cannot create hsr debugfs directory [ 165.412541][T11877] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 165.434702][T11877] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 165.452407][T11877] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 165.462688][T11877] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 165.560319][T11877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.592045][T11877] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.611144][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.618275][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.731765][ T5148] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.738850][ T5148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.805810][T11877] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 165.828178][T11877] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.968599][T11877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.210420][T11877] veth0_vlan: entered promiscuous mode [ 166.231409][T11877] veth1_vlan: entered promiscuous mode [ 166.274244][T11877] veth0_macvtap: entered promiscuous mode [ 166.293580][T11877] veth1_macvtap: entered promiscuous mode [ 166.314554][T11877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.332916][T11877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.360805][ T70] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.384433][ T70] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.406820][ T70] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.446521][ T70] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.659270][T12071] netlink: 'syz.9.2810': attribute type 1 has an invalid length. [ 166.798765][T12071] gretap1: entered allmulticast mode [ 166.811272][T12071] bond1: (slave gretap1): making interface the new active one [ 166.821652][T12071] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 166.885482][T12092] loop9: detected capacity change from 0 to 512 [ 166.961504][T12092] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.036585][T12092] ext4 filesystem being mounted at /332/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 167.157978][ T6991] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.224421][T12126] loop9: detected capacity change from 0 to 512 [ 167.250608][T12126] EXT4-fs: Ignoring removed oldalloc option [ 167.288091][T12126] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.2821: invalid indirect mapped block 4294967295 (level 1) [ 167.309536][T12126] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 167.313002][T12126] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.2821: invalid indirect mapped block 4294967295 (level 1) [ 167.322142][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 167.322171][ C0] EXT4-fs (loop9): initial error at time 1775042332: ext4_free_branches:1023: inode 11 [ 167.322209][ C0] EXT4-fs (loop9): last error at time 1775042332: ext4_free_branches:1023: inode 11 [ 167.370903][T12126] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 167.371250][T12126] EXT4-fs (loop9): 2 truncates cleaned up [ 167.391145][T12126] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.452913][ T6991] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.777815][T12187] loop3: detected capacity change from 0 to 256 [ 167.800842][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 167.800857][ T28] audit: type=1326 audit(1775042333.468:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12188 comm="syz.9.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d44dec819 code=0x7ffc0000 [ 167.833689][T12187] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 167.872336][ T28] audit: type=1326 audit(1775042333.498:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12188 comm="syz.9.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d44dec819 code=0x7ffc0000 [ 167.896192][ T28] audit: type=1326 audit(1775042333.498:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12188 comm="syz.9.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d44dec819 code=0x7ffc0000 [ 167.922373][ T28] audit: type=1326 audit(1775042333.498:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12188 comm="syz.9.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d44dec819 code=0x7ffc0000 [ 167.998463][ T28] audit: type=1326 audit(1775042333.498:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12188 comm="syz.9.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5d44dec819 code=0x7ffc0000 [ 168.022469][ T28] audit: type=1326 audit(1775042333.518:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12188 comm="syz.9.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d44dec819 code=0x7ffc0000 [ 168.066742][ T28] audit: type=1326 audit(1775042333.518:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12188 comm="syz.9.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d44dec819 code=0x7ffc0000 [ 168.123232][ T28] audit: type=1326 audit(1775042333.518:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12188 comm="syz.9.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d44dec819 code=0x7ffc0000 [ 168.148415][ T28] audit: type=1326 audit(1775042333.518:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12188 comm="syz.9.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d44dec819 code=0x7ffc0000 [ 168.190719][ T28] audit: type=1326 audit(1775042333.518:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12188 comm="syz.9.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d44dec819 code=0x7ffc0000 [ 168.794045][ T70] nci: nci_ntf_packet: unknown ntf opcode 0xe27 [ 169.149513][T12286] pimreg: entered allmulticast mode [ 169.155947][T12286] pimreg: left allmulticast mode [ 169.262103][T12306] loop9: detected capacity change from 0 to 512 [ 169.274714][T12306] EXT4-fs (loop9): 1 orphan inode deleted [ 169.281910][T12306] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.342839][ T6991] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.404109][T12318] loop5: detected capacity change from 0 to 128 [ 169.568358][T12268] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 169.824071][T12349] sch_fq: defrate 4294967295 ignored. [ 169.878374][T12355] loop3: detected capacity change from 0 to 4096 [ 169.886702][T12355] ext3: Unknown parameter 'obj_type' [ 170.656148][T12384] bridge_slave_0: left allmulticast mode [ 170.661941][T12384] bridge_slave_0: left promiscuous mode [ 170.668024][T12384] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.676668][T12384] bridge_slave_1: left allmulticast mode [ 170.683064][T12384] bridge_slave_1: left promiscuous mode [ 170.688717][T12384] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.698788][T12384] bond0: (slave bond_slave_0): Releasing backup interface [ 170.708044][T12384] bond0: (slave bond_slave_1): Releasing backup interface [ 170.719521][T12384] team0: Port device team_slave_0 removed [ 170.727423][T12384] team0: Port device team_slave_1 removed [ 170.734241][T12384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.741851][T12384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.751205][T12384] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 170.787232][T12388] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2900'. [ 170.986915][T12403] syzkaller1: entered promiscuous mode [ 170.992809][T12403] syzkaller1: entered allmulticast mode [ 171.048302][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811afdae00: rx timeout, send abort [ 171.286827][T12419] netlink: 148 bytes leftover after parsing attributes in process `syz.8.2915'. [ 171.312147][T12421] batman_adv: batadv0: Adding interface: dummy0 [ 171.319069][T12421] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.349620][T12421] batman_adv: batadv0: Interface activated: dummy0 [ 171.387395][T12421] batadv0: mtu less than device minimum [ 171.396098][T12421] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 171.406959][T12421] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 171.417823][T12421] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 171.428911][T12421] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 171.439731][T12421] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 171.450591][T12421] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 171.461523][T12421] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 171.472342][T12421] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 171.553241][T12429] loop9: detected capacity change from 0 to 512 [ 171.556502][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811afdae00: abort rx timeout. Force session deactivation [ 171.590281][T12429] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.607990][T12429] ext4 filesystem being mounted at /354/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.766743][ T6991] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.957077][T12513] batman_adv: batadv0: Adding interface: dummy0 [ 172.972489][T12513] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.026458][T12507] Process accounting resumed [ 173.109242][T12513] batman_adv: batadv0: Interface activated: dummy0 [ 173.369413][T12527] netlink: 'syz.9.2950': attribute type 10 has an invalid length. [ 173.406698][T12527] team0: Failed to send options change via netlink (err -105) [ 173.425683][T12527] team0: Port device dummy0 added [ 173.439219][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 173.439235][ T28] audit: type=1400 audit(1775042339.028:1818): avc: denied { setopt } for pid=12526 comm="syz.9.2950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 173.589877][T12531] netlink: 'syz.9.2950': attribute type 10 has an invalid length. [ 173.612359][T12531] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 173.731662][T12531] team0: Failed to send options change via netlink (err -105) [ 173.739819][T12531] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 173.765875][T12531] team0: Port device dummy0 removed [ 173.785472][T12531] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 173.813644][T12547] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.2955'. [ 174.591963][T12611] syzkaller0: entered promiscuous mode [ 174.596673][T12617] loop3: detected capacity change from 0 to 128 [ 174.601831][T12611] syzkaller0: entered allmulticast mode [ 174.701429][T12623] bridge0: port 1(gretap0) entered blocking state [ 174.707939][T12623] bridge0: port 1(gretap0) entered disabled state [ 174.714859][T12623] gretap0: entered allmulticast mode [ 174.724384][T12623] gretap0: entered promiscuous mode [ 174.730045][T12623] bridge0: port 1(gretap0) entered blocking state [ 174.736500][T12623] bridge0: port 1(gretap0) entered forwarding state [ 174.857977][T12641] netlink: 'syz.2.2995': attribute type 1 has an invalid length. [ 174.896615][T12641] bond4: entered allmulticast mode [ 174.907509][T12641] 8021q: adding VLAN 0 to HW filter on device bond4 [ 174.929653][T12641] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 174.938534][T12641] bond4: (slave batadv1): making interface the new active one [ 174.949242][T12641] batadv1: entered allmulticast mode [ 174.980829][T12646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2995'. [ 175.004053][T12641] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 175.084290][T12646] bond4 (unregistering): (slave batadv1): Releasing active interface [ 175.127056][T12646] batadv1: left allmulticast mode [ 175.146286][T12646] bond4 (unregistering): Released all slaves [ 175.287154][T12688] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3006'. [ 175.304903][T12683] loop3: detected capacity change from 0 to 1764 [ 175.315416][T12688] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3006'. [ 175.337902][T12683] ISOFS: Unable to identify CD-ROM format. [ 175.354050][T12696] veth0: entered promiscuous mode [ 175.363144][T12696] veth0: left promiscuous mode [ 175.476238][T12700] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3010'. [ 175.486101][T12700] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3010'. [ 175.496100][T12716] syzkaller1: entered promiscuous mode [ 175.503172][T12716] syzkaller1: entered allmulticast mode [ 175.674734][T12736] loop5: detected capacity change from 0 to 1024 [ 175.695118][T12736] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.735907][T11877] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.769380][T12742] loop5: detected capacity change from 0 to 256 [ 175.783400][T12742] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 175.796336][T12742] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 175.931412][T12754] loop5: detected capacity change from 0 to 2048 [ 175.952983][ T5202] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 175.959727][T12754] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.968306][ T5202] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 175.982509][T12754] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.086899][T11877] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.464869][ T28] audit: type=1400 audit(1775042342.128:1819): avc: denied { name_bind } for pid=12777 comm="syz.5.3042" src=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 176.499226][T12786] netlink: 'syz.8.3051': attribute type 1 has an invalid length. [ 176.560943][T12786] bond1: entered allmulticast mode [ 176.577463][T12786] 8021q: adding VLAN 0 to HW filter on device bond1 [ 176.600940][T12794] loop2: detected capacity change from 0 to 1024 [ 176.642931][T12794] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.647773][T12792] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 176.663897][T12792] bond1: (slave batadv1): making interface the new active one [ 176.672040][T12792] batadv1: entered allmulticast mode [ 176.678595][T12792] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 176.683399][T12786] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3051'. [ 176.721876][T12802] loop9: detected capacity change from 0 to 512 [ 176.728436][T12802] EXT4-fs: Ignoring removed bh option [ 176.734088][T12802] EXT4-fs: inline encryption not supported [ 176.740543][T12802] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 176.807530][T12786] bond1 (unregistering): (slave batadv1): Releasing active interface [ 176.816811][T12802] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 176.831170][T12786] batadv1: left allmulticast mode [ 176.846373][T12802] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3049: bg 0: block 248: padding at end of block bitmap is not set [ 176.861039][T12802] loop9: lost filesystem error report for type 5 error -117 [ 176.863246][T12802] Quota error (device loop9): write_blk: dquota write failed [ 176.870630][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 176.870646][ C0] EXT4-fs (loop9): last error at time 1775042342: ext4_validate_block_bitmap:441 [ 176.895305][T12809] loop5: detected capacity change from 0 to 256 [ 176.897866][T12802] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 176.905450][T12786] bond1 (unregistering): Released all slaves [ 176.914015][T12802] EXT4-fs error (device loop9): ext4_acquire_dquot:7026: comm syz.9.3049: Failed to acquire dquot type 1 [ 176.931366][T12802] loop9: lost filesystem error report for type 5 error -28 [ 176.940807][T12802] EXT4-fs (loop9): 1 truncate cleaned up [ 176.945938][T12809] FAT-fs (loop5): Directory bread(block 64) failed [ 176.948731][T12802] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 176.970294][T12809] FAT-fs (loop5): Directory bread(block 65) failed [ 176.986210][T12809] FAT-fs (loop5): Directory bread(block 66) failed [ 176.992938][T12809] FAT-fs (loop5): Directory bread(block 67) failed [ 176.999805][T12809] FAT-fs (loop5): Directory bread(block 68) failed [ 177.006585][T12809] FAT-fs (loop5): Directory bread(block 69) failed [ 177.013907][T12809] FAT-fs (loop5): Directory bread(block 70) failed [ 177.029199][T12809] FAT-fs (loop5): Directory bread(block 71) failed [ 177.045965][T12809] FAT-fs (loop5): Directory bread(block 72) failed [ 177.059234][T12809] FAT-fs (loop5): Directory bread(block 73) failed [ 177.188664][T12813] netlink: 856 bytes leftover after parsing attributes in process `syz.3.3056'. [ 177.247158][T12817] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.264976][T12805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.275056][ T6991] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 177.290672][T12817] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 177.302372][T12817] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.329308][T12824] loop3: detected capacity change from 0 to 512 [ 177.350837][T12824] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.366569][ T70] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.366861][T12824] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 177.452477][T11278] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.456388][T12839] loop9: detected capacity change from 0 to 128 [ 177.477047][T12817] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.498746][T12839] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 177.502003][T12817] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 177.521384][T12817] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.534145][T12839] ext4 filesystem being mounted at /375/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 177.572075][ T70] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.591410][T12843] netlink: 'syz.3.3065': attribute type 1 has an invalid length. [ 177.618119][T12817] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.629865][T12817] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 177.640847][T12817] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.652984][ T6991] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 177.671500][T12843] bond1: entered allmulticast mode [ 177.676951][T12843] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.687232][ T70] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.706484][T12847] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 177.715746][T12847] bond1: (slave batadv1): making interface the new active one [ 177.723731][T12847] batadv1: entered allmulticast mode [ 177.733546][T12847] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 177.743129][T12843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3065'. [ 177.763434][T12817] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.774482][T12817] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 177.785309][T12817] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.801922][ T70] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.830894][T12843] bond1 (unregistering): (slave batadv1): Releasing active interface [ 177.839010][T12843] batadv1: left allmulticast mode [ 177.846749][T12843] bond1 (unregistering): Released all slaves [ 177.887018][ T314] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.895513][ T314] netdevsim netdevsim8 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 177.907209][ T314] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.996241][ T314] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.007932][ T314] netdevsim netdevsim8 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 178.016536][ T314] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.044746][ T314] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.086016][ T314] netdevsim netdevsim8 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 178.107362][ T314] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.115871][ T314] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.124306][ T314] netdevsim netdevsim8 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 178.132650][ T314] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.170807][ T70] gretap0: left allmulticast mode [ 178.175976][ T70] gretap0: left promiscuous mode [ 178.187732][ T70] bridge0: port 1(gretap0) entered disabled state [ 178.192468][T12884] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3076'. [ 178.301197][ T70] bond0 (unregistering): Released all slaves [ 178.308811][ T70] bond1 (unregistering): (slave bond2): Releasing backup interface [ 178.316733][ T70] bond2 (unregistering): left promiscuous mode [ 178.323268][ T70] bond1 (unregistering): Released all slaves [ 178.331171][ T70] bond2 (unregistering): Released all slaves [ 178.338818][ T70] bond3 (unregistering): Released all slaves [ 178.349066][T12829] chnl_net:caif_netlink_parms(): no params data found [ 178.364714][ T70] hsr_slave_0: left promiscuous mode [ 178.370372][ T70] hsr_slave_1: left promiscuous mode [ 178.378351][ T70] veth1_macvtap: left promiscuous mode [ 178.383938][ T70] veth0_macvtap: left promiscuous mode [ 178.389581][ T70] veth1_vlan: left promiscuous mode [ 178.394926][ T70] veth0_vlan: left promiscuous mode [ 178.571683][T12903] EXT4-fs: Ignoring removed nomblk_io_submit option [ 178.580953][T12829] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.589706][T12829] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.596878][T12829] bridge_slave_0: entered allmulticast mode [ 178.600878][T12903] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #15: comm syz.5.3081: corrupted inode contents [ 178.603738][T12829] bridge_slave_0: entered promiscuous mode [ 178.621645][T12829] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.629022][T12829] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.649850][T12829] bridge_slave_1: entered allmulticast mode [ 178.659351][T12903] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 178.659842][T12829] bridge_slave_1: entered promiscuous mode [ 178.674838][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 178.674862][ C0] EXT4-fs (loop5): initial error at time 1775042344: ext4_do_update_inode:5602: inode 15 [ 178.674896][ C0] EXT4-fs (loop5): last error at time 1775042344: ext4_do_update_inode:5602: inode 15 [ 178.753981][T12903] EXT4-fs (loop5): Remounting filesystem read-only [ 178.760737][T12903] EXT4-fs (loop5): 1 orphan inode deleted [ 178.766958][T12903] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.807639][T12829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.830218][T12829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.878781][T12829] team0: Port device team_slave_0 added [ 178.894826][T11877] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.895879][T12829] team0: Port device team_slave_1 added [ 178.935530][T12829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.938396][ T28] audit: type=1400 audit(1775042344.598:1820): avc: denied { read } for pid=12922 comm="syz.3.3082" path="socket:[39995]" dev="sockfs" ino=39995 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 178.973865][T12829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.021006][T12829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.056553][T12829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.064352][T12829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.090262][T12829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.119503][T12829] hsr_slave_0: entered promiscuous mode [ 179.125545][T12829] hsr_slave_1: entered promiscuous mode [ 179.147652][T12829] debugfs: 'hsr0' already exists in 'hsr' [ 179.153521][T12829] Cannot create hsr debugfs directory [ 179.190406][ T28] audit: type=1326 audit(1775042344.858:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12942 comm="syz.9.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d44dec819 code=0x7ffc0000 [ 179.236124][ T28] audit: type=1326 audit(1775042344.858:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12942 comm="syz.9.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d44dec819 code=0x7ffc0000 [ 179.267550][ T28] audit: type=1326 audit(1775042344.858:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12942 comm="syz.9.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d44dec819 code=0x7ffc0000 [ 179.291793][ T28] audit: type=1326 audit(1775042344.858:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12942 comm="syz.9.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5d44dec819 code=0x7ffc0000 [ 179.319492][ T28] audit: type=1326 audit(1775042344.858:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12942 comm="syz.9.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d44dec819 code=0x7ffc0000 [ 179.347882][ T28] audit: type=1326 audit(1775042344.858:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12942 comm="syz.9.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d44dec819 code=0x7ffc0000 [ 179.372602][ T28] audit: type=1326 audit(1775042344.858:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12942 comm="syz.9.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d44dec819 code=0x7ffc0000 [ 179.396514][ T28] audit: type=1326 audit(1775042344.858:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12942 comm="syz.9.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5d44dec819 code=0x7ffc0000 [ 179.423117][ T28] audit: type=1326 audit(1775042344.858:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12942 comm="syz.9.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d44dec819 code=0x7ffc0000 [ 179.476606][T12953] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3090'. [ 179.520021][T12956] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.3091: invalid indirect mapped block 256 (level 2) [ 179.534347][T12956] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 179.538513][T12956] EXT4-fs (loop9): 2 truncates cleaned up [ 179.547678][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 179.547705][ C0] EXT4-fs (loop9): initial error at time 1775042345: ext4_free_branches:1023: inode 11 [ 179.547738][ C0] EXT4-fs (loop9): last error at time 1775042345: ext4_free_branches:1023: inode 11 [ 179.586124][T12956] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.602476][T12956] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.3091: bg 0: block 5: invalid block bitmap [ 179.615223][T12956] EXT4-fs error (device loop9) in ext4_setattr:6028: error 28 [ 179.634771][ T6991] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.656429][T12829] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 179.685662][T12829] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 179.711816][T12829] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 179.723305][T12981] set_capacity_and_notify: 3 callbacks suppressed [ 179.723319][T12981] loop9: detected capacity change from 0 to 512 [ 179.738982][T12829] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 179.751077][T12981] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2 [ 179.760199][T12981] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #13: comm syz.9.3093: inode has both inline data and extents flags [ 179.773864][T12981] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 179.777269][T12981] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.3093: couldn't read orphan inode 13 (err -117) [ 179.786452][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 179.786468][ C0] EXT4-fs (loop9): initial error at time 1775042345: ext4_orphan_get:1397: inode 13 [ 179.786504][ C0] EXT4-fs (loop9): last error at time 1775042345: ext4_orphan_get:1397: inode 13 [ 179.830181][T12981] loop9: lost filesystem error report for type 5 error -117 [ 179.830829][T12981] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.865400][T12829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.891474][T12829] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.900831][ T6991] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.911084][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.918207][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.930217][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.937326][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.984589][T13012] loop5: detected capacity change from 0 to 512 [ 180.015912][T13012] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.063705][T13012] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 180.092522][T12829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.148066][T11877] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.235932][T13049] netlink: 'syz.9.3104': attribute type 1 has an invalid length. [ 180.275510][T13049] 8021q: adding VLAN 0 to HW filter on device bond2 [ 180.310128][T13049] bond2: (slave macvlan1): making interface the new active one [ 180.328840][T13049] bond2: (slave macvlan1): Enslaving as an active interface with an up link [ 180.387396][T12829] veth0_vlan: entered promiscuous mode [ 180.401146][T12829] veth1_vlan: entered promiscuous mode [ 180.481880][T12829] veth0_macvtap: entered promiscuous mode [ 180.509743][T12829] veth1_macvtap: entered promiscuous mode [ 180.521569][T12829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.549069][T12829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.591149][ T40] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.600144][ T23] IPVS: starting estimator thread 0... [ 180.607634][ T40] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.640759][ T40] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.649772][ T40] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.689207][T13080] IPVS: using max 2592 ests per chain, 129600 per kthread [ 181.017487][T13121] net_ratelimit: 31 callbacks suppressed [ 181.017496][T13121] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 181.313326][T13139] loop5: detected capacity change from 0 to 128 [ 181.334302][T13139] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 181.500757][ T5148] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 181.570407][T13176] loop6: detected capacity change from 0 to 1024 [ 181.583836][T13180] loop5: detected capacity change from 0 to 256 [ 181.602146][T13176] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.629951][T13180] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 181.687132][T12829] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.837025][T13201] FAT-fs (loop5): error, invalid FAT chain (i_pos 196, last_block 8200) [ 181.847102][T13153] loop3: detected capacity change from 0 to 256 [ 181.899631][T13201] FAT-fs (loop5): Filesystem has been set read-only [ 182.179799][T13217] loop3: detected capacity change from 0 to 256 [ 182.519921][T13247] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3139'. [ 182.565780][T13256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3140'. [ 182.568244][T13247] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3139'. [ 182.597738][T13256] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3140'. [ 182.922384][T13280] netlink: 'syz.3.3147': attribute type 10 has an invalid length. [ 182.930570][T13280] batman_adv: batadv0: Interface deactivated: dummy0 [ 182.938068][T13280] batman_adv: batadv0: Removing interface: dummy0 [ 182.967736][T13280] team0: Port device dummy0 added [ 182.999811][T13285] netlink: 'syz.3.3147': attribute type 10 has an invalid length. [ 183.108648][T13285] team0: Port device dummy0 removed [ 183.125760][T13285] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 183.139614][T13289] netlink: 'syz.6.3150': attribute type 10 has an invalid length. [ 183.156264][T13289] netlink: 16154 bytes leftover after parsing attributes in process `syz.6.3150'. [ 183.371179][T13313] ip6tnl1: entered promiscuous mode [ 183.376416][T13313] ip6tnl1: entered allmulticast mode [ 183.647452][T13331] netlink: 'syz.6.3163': attribute type 10 has an invalid length. [ 183.673854][T13331] team0: Port device dummy0 added [ 183.690568][T13301] dvmrp0: entered allmulticast mode [ 183.707339][T13335] netlink: 'syz.6.3163': attribute type 10 has an invalid length. [ 183.719963][T13335] team0: Port device dummy0 removed [ 183.752209][T13335] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 183.775946][T13301] dvmrp0: left allmulticast mode [ 184.596386][T13354] loop6: detected capacity change from 0 to 256 [ 184.604011][T13354] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 184.665247][ T28] kauditd_printk_skb: 90 callbacks suppressed [ 184.665285][ T28] audit: type=1326 audit(1775042350.328:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13355 comm="syz.6.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de206c819 code=0x7ffc0000 [ 184.672434][T13353] netlink: 39 bytes leftover after parsing attributes in process `syz.5.3171'. [ 184.718528][ T28] audit: type=1326 audit(1775042350.368:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13355 comm="syz.6.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de206c819 code=0x7ffc0000 [ 184.766129][ T28] audit: type=1326 audit(1775042350.368:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13355 comm="syz.6.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de206c819 code=0x7ffc0000 [ 184.790953][ T28] audit: type=1326 audit(1775042350.368:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13355 comm="syz.6.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de206c819 code=0x7ffc0000 [ 184.829121][ T28] audit: type=1326 audit(1775042350.368:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13355 comm="syz.6.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0de206c819 code=0x7ffc0000 [ 184.879345][ T28] audit: type=1326 audit(1775042350.368:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13355 comm="syz.6.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de206c819 code=0x7ffc0000 [ 184.929270][ T28] audit: type=1326 audit(1775042350.378:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13355 comm="syz.6.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de206c819 code=0x7ffc0000 [ 184.953478][ T28] audit: type=1326 audit(1775042350.378:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13355 comm="syz.6.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de206c819 code=0x7ffc0000 [ 184.977227][ T28] audit: type=1326 audit(1775042350.378:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13355 comm="syz.6.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f0de206c819 code=0x7ffc0000 [ 185.000987][ T28] audit: type=1326 audit(1775042350.378:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13355 comm="syz.6.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de206c819 code=0x7ffc0000 [ 185.927113][T13391] netlink: 'syz.9.3187': attribute type 10 has an invalid length. [ 186.903039][T13386] ================================================================== [ 186.911147][T13386] BUG: KCSAN: data-race in pfifo_fast_dequeue / pfifo_fast_enqueue [ 186.919043][T13386] [ 186.921356][T13386] write to 0xffff8881619623c0 of 8 bytes by task 13385 on cpu 1: [ 186.929056][T13386] pfifo_fast_dequeue+0x770/0x8f0 [ 186.934087][T13386] __qdisc_run+0x19a/0xc90 [ 186.938496][T13386] __dev_queue_xmit+0xcde/0x1f20 [ 186.943428][T13386] ip_finish_output2+0x705/0x8c0 [ 186.948360][T13386] ip_finish_output+0x112/0x290 [ 186.953213][T13386] ip_output+0xbd/0x1c0 [ 186.957373][T13386] ip_local_out+0xaa/0xd0 [ 186.961706][T13386] iptunnel_xmit+0x3d8/0x6a0 [ 186.966300][T13386] ip_tunnel_xmit+0x1212/0x12d0 [ 186.971144][T13386] ipgre_xmit+0x5c0/0x6a0 [ 186.975466][T13386] dev_hard_start_xmit+0x136/0x3f0 [ 186.980596][T13386] __dev_queue_xmit+0xd9a/0x1f20 [ 186.985532][T13386] __bpf_redirect+0x67f/0x990 [ 186.990208][T13386] bpf_clone_redirect+0x20c/0x290 [ 186.995242][T13386] bpf_prog_3e1cbbed0c4acd81+0x5f/0x68 [ 187.000692][T13386] bpf_test_run+0x29d/0x620 [ 187.005201][T13386] bpf_prog_test_run_skb+0x9a4/0xef0 [ 187.010494][T13386] bpf_prog_test_run+0x204/0x340 [ 187.015423][T13386] __sys_bpf+0x52e/0x7e0 [ 187.019658][T13386] __x64_sys_bpf+0x41/0x50 [ 187.024067][T13386] x64_sys_call+0x10cb/0x3020 [ 187.028744][T13386] do_syscall_64+0x12c/0x370 [ 187.033331][T13386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.039217][T13386] [ 187.041525][T13386] read to 0xffff8881619623c0 of 8 bytes by task 13386 on cpu 0: [ 187.049138][T13386] pfifo_fast_enqueue+0xd5/0x2c0 [ 187.054079][T13386] __dev_queue_xmit+0x694/0x1f20 [ 187.059017][T13386] __bpf_redirect+0x862/0x990 [ 187.063690][T13386] bpf_clone_redirect+0x20c/0x290 [ 187.068725][T13386] bpf_prog_8dc8bbec83c669e7+0x22/0x2a [ 187.074167][T13386] bpf_test_run+0x29d/0x620 [ 187.078672][T13386] bpf_prog_test_run_skb+0x9a4/0xef0 [ 187.083964][T13386] bpf_prog_test_run+0x204/0x340 [ 187.088901][T13386] __sys_bpf+0x52e/0x7e0 [ 187.093138][T13386] __x64_sys_bpf+0x41/0x50 [ 187.097553][T13386] x64_sys_call+0x10cb/0x3020 [ 187.102237][T13386] do_syscall_64+0x12c/0x370 [ 187.106826][T13386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.112721][T13386] [ 187.115032][T13386] value changed: 0xffff888104e87d00 -> 0x0000000000000000 [ 187.122119][T13386] [ 187.124427][T13386] Reported by Kernel Concurrency Sanitizer on: [ 187.130567][T13386] CPU: 0 UID: 0 PID: 13386 Comm: syz.6.3185 Tainted: G W syzkaller #0 PREEMPT(full) [ 187.141509][T13386] Tainted: [W]=WARN SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 187.145300][T13386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 187.155348][T13386] ================================================================== [ 187.277962][T13391] team0: Port device netdevsim1 added [ 187.540032][ T70] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.612233][ T70] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.681529][ T70] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.742135][ T70] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.809563][ T70] bridge_slave_1: left allmulticast mode [ 187.815288][ T70] bridge_slave_1: left promiscuous mode [ 187.822586][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.831213][ T70] bridge_slave_0: left allmulticast mode [ 187.836850][ T70] bridge_slave_0: left promiscuous mode [ 187.844180][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.951019][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.960535][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.970265][ T70] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 187.979821][ T70] bond0 (unregistering): Released all slaves [ 188.033627][ T70] hsr_slave_0: left promiscuous mode [ 188.040154][ T70] hsr_slave_1: left promiscuous mode [ 188.045909][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.054338][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.062821][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.070463][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.080125][ T70] veth1_macvtap: left promiscuous mode [ 188.085703][ T70] veth0_macvtap: left promiscuous mode [ 188.091230][ T70] veth1_vlan: left promiscuous mode [ 188.096501][ T70] veth0_vlan: left promiscuous mode [ 188.151122][ T70] team0 (unregistering): Port device team_slave_1 removed [ 188.163538][ T70] team0 (unregistering): Port device team_slave_0 removed [ 188.483761][ T70] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.522246][ T70] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.581415][ T70] team0: Port device netdevsim1 removed [ 188.587831][ T70] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.631621][ T70] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.709876][ T70] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.763466][ T70] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.792558][ T70] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.847529][ T70] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.916240][ T70] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.927133][ T70] netdevsim netdevsim8 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 188.937190][ T70] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.986959][ T70] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.997404][ T70] netdevsim netdevsim8 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 189.007398][ T70] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.061393][ T70] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.071564][ T70] netdevsim netdevsim8 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 189.081402][ T70] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.121223][ T70] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.131212][ T70] netdevsim netdevsim8 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 189.142155][ T70] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.220223][ T70] bridge_slave_1: left allmulticast mode [ 189.225949][ T70] bridge_slave_1: left promiscuous mode [ 189.232041][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.240273][ T70] bridge_slave_0: left allmulticast mode [ 189.245943][ T70] bridge_slave_0: left promiscuous mode [ 189.252723][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.388702][ T70] bond1 (unregistering): (slave gretap1): Releasing active interface [ 189.490765][ T70] smc: removing net device bond0 with user defined pnetid SYZ2 [ 189.498891][ T70] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 189.508192][ T70] bond0 (unregistering): Released all slaves [ 189.515506][ T70] bond1 (unregistering): Released all slaves [ 189.524042][ T70] bond2 (unregistering): (slave macvlan1): Releasing active interface [ 189.533414][ T70] bond2 (unregistering): Released all slaves [ 189.611344][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.621297][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.631008][ T70] bond0 (unregistering): Released all slaves [ 189.692206][ T70] bond0 (unregistering): Released all slaves [ 189.758466][ T70] tipc: Left network mode [ 189.763097][ T70] tipc: Left network mode [ 189.776306][ T70] hsr_slave_0: left promiscuous mode [ 189.782031][ T70] hsr_slave_1: left promiscuous mode [ 189.787640][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.795725][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.803592][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.811149][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.820412][ T70] hsr_slave_0: left promiscuous mode [ 189.826123][ T70] hsr_slave_1: left promiscuous mode [ 189.831861][ T70] batman_adv: batadv0: Interface deactivated: dummy0 [ 189.838528][ T70] batman_adv: batadv0: Removing interface: dummy0 [ 189.850374][ T70] veth1_macvtap: left promiscuous mode [ 189.855908][ T70] veth0_macvtap: left promiscuous mode [ 189.861455][ T70] veth1_vlan: left promiscuous mode [ 189.866733][ T70] veth0_vlan: left promiscuous mode [ 189.872429][ T70] veth1_macvtap: left promiscuous mode [ 189.877903][ T70] veth0_macvtap: left promiscuous mode [ 189.884099][ T70] veth1_vlan: left promiscuous mode [ 189.889383][ T70] veth0_vlan: left promiscuous mode [ 189.894967][ T70] veth1_macvtap: left promiscuous mode [ 189.900459][ T70] veth0_macvtap: left promiscuous mode [ 189.905924][ T70] veth1_vlan: left promiscuous mode [ 189.911191][ T70] veth0_vlan: left promiscuous mode [ 190.063985][ T70] team0 (unregistering): Port device team_slave_1 removed [ 190.073760][ T70] team0 (unregistering): Port device team_slave_0 removed [ 190.101956][ T70] pimreg (unregistering): left allmulticast mode [ 190.736299][ T70] IPVS: stop unused estimator thread 0... [ 190.743360][ T70] IPVS: stop unused estimator thread 0... [ 193.181655][ T5148] smc: removing net device bond0 with user defined pnetid SYZ2 [ 193.191725][ T5148] bond0 (unregistering): Released all slaves [ 193.198828][ T5148] bond1 (unregistering): Released all slaves [ 193.228614][ T5148] hsr_slave_0: left promiscuous mode [ 193.234284][ T5148] hsr_slave_1: left promiscuous mode [ 193.432162][ T5148] IPVS: stop unused estimator thread 0...